CVE-2020-22176: phpgurukul hospital_management_system Improper Authentication
Vulnerability summary
CVE-2020-22176 is a high (CVSS 7.5) Improper Authentication vulnerability in phpgurukul hospital_management_system. EPSS estimates a 2.09% chance of exploitation in the next 30 days, higher than 81.4% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 22-06-2021PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
PHPGurukul Hospital Management System in PHP v4.0 has a sensitive information disclosure vulnerability in multiple areas. Remote unauthenticated users can exploit the vulnerability to obtain user sensitive information.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
2.09%
Chance of exploitation in the next 30 days
Percentile
81%
Versus all other CVEs
30-day change
No change 0.00 pp
From 2.09% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundPhpgurukul Hospital Management System4.0 Cve
Maturity: poc
Weaknesses
CWE · root cause- CWE-287Improper AuthenticationWhen an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
- CWE-862Missing AuthorizationThe product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Affected systems
Phpgurukul1 product
1 vendor · 1 product
References
1 links- github.com/itodaro/PHPGurukul_Hospital_Management_System4.0_cveX Refsource MISCExploitThird Party Advisory