CVE-2024-11678 | Low | 3.5 | 2024-11-26 | A vulnerability was found in CodeAstro Hospital Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file… |
CVE-2024-11677 | Low | 3.5 | 2024-11-26 | A vulnerability was found in CodeAstro Hospital Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /backend… |
CVE-2024-11676 | Low | 3.5 | 2024-11-26 | A vulnerability was found in CodeAstro Hospital Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of th… |
CVE-2024-11674 | Medium | 6.3 | 2024-11-26 | A vulnerability, which was classified as critical, was found in CodeAstro Hospital Management System 1.0. Affected is an unknown function of the file /backend/… |
CVE-2023-43909 | Critical | 9.1 | 2023-09-29 | Hospital Management System thru commit 4770d was discovered to contain a SQL injection vulnerability via the app_contact parameter in appsearch.php. |
CVE-2023-4176 | Medium | 6.3 | 2023-08-06 | A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been classified as critical. This affects an unknown part of the file appoin… |
CVE-2023-3811 | Medium | 6.3 | 2023-07-21 | A vulnerability was found in Hospital Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file patientprofi… |
CVE-2023-3810 | Medium | 6.3 | 2023-07-21 | A vulnerability was found in Hospital Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file patientappoi… |
CVE-2023-3809 | Medium | 6.3 | 2023-07-21 | A vulnerability was found in Hospital Management System 1.0. It has been classified as critical. This affects an unknown part of the file patient.php. The mani… |
CVE-2023-3808 | Medium | 6.3 | 2023-07-21 | A vulnerability was found in Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file patien… |
CVE-2023-34651 | Medium | 6.1 | 2023-06-28 | PHPgurukl Hospital Management System v.1.0 is vulnerable to Cross Site Scripting (XSS). |
CVE-2022-48120 | Critical | 9.8 | 2023-01-20 | SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9bd (on March 13, 2021), allows attackers… |
CVE-2022-46093 | High | 8.2 | 2023-01-13 | Hospital Management System v1.0 is vulnerable to SQL Injection. Attackers can gain administrator privileges without the need for a password. |
CVE-2022-38637 | Critical | 9.8 | 2022-09-13 | Hospital Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the Username and Password parameters on the Login page. |
CVE-2022-34590 | High | 7.2 | 2022-07-20 | Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in /HMS/admin.php. |
CVE-2022-32095 | Critical | 9.8 | 2022-07-01 | Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at orders.php. |
CVE-2022-32094 | Critical | 9.8 | 2022-07-01 | Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doctorlogin.php. |
CVE-2022-32093 | Critical | 9.8 | 2022-07-01 | Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at adminlogin.php. |
CVE-2021-44095 | Critical | 9.8 | 2022-06-02 | A SQL injection vulnerability exists in ProjectWorlds Hospital Management System in php 1.0 on login page that allows a remote attacker to compromise Applicati… |
CVE-2022-30516 | Critical | 9.8 | 2022-05-26 | In Hospital-Management-System v1.0, the editid parameter in the doctor.php page is vulnerable to SQL injection attacks. |
CVE-2022-30012 | High | 7.5 | 2022-05-16 | In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obt… |
CVE-2022-30011 | Critical | 9.8 | 2022-05-16 | In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability. |
CVE-2022-28929 | Critical | 9.8 | 2022-05-15 | Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the delid parameter at viewtreatmentrecord.php. |
CVE-2022-30449 | Critical | 9.8 | 2022-05-11 | Hospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in room.php. |
CVE-2022-30448 | Critical | 9.8 | 2022-05-11 | Hospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a File upload vulnerability in treatmentrecord.php. |
CVE-2022-27420 | Critical | 9.8 | 2022-05-04 | Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the patient_contact parameter in patientsearch.php. |
CVE-2022-27413 | Critical | 9.8 | 2022-05-03 | Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the adminname parameter in admin.php. |
CVE-2022-27299 | Critical | 9.8 | 2022-04-26 | Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the component room.php. |
CVE-2022-26546 | Critical | 9.1 | 2022-03-31 | Hospital Management System v1.0 was discovered to lack an authorization component, allowing attackers to access sensitive information and obtain the admin pass… |
CVE-2022-24136 | Critical | 9.8 | 2022-03-31 | Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can u… |
CVE-2022-25493 | Medium | 6.1 | 2022-03-15 | HMS v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via treatmentrecord.php. |
CVE-2022-25492 | Critical | 9.8 | 2022-03-15 | HMS v1.0 was discovered to contain a SQL injection vulnerability via the medicineid parameter in ajaxmedicine.php. |
CVE-2022-25491 | High | 7.5 | 2022-03-15 | HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in appointment.php. |
CVE-2022-25490 | Critical | 9.8 | 2022-03-15 | HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in department.php. |
CVE-2022-25409 | Medium | 5.4 | 2022-02-28 | Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the demail parameter at /admin-panel1.php. |
CVE-2022-25408 | Medium | 5.4 | 2022-02-28 | Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the dpassword parameter at /admin-panel1.php. |
CVE-2022-25407 | Medium | 5.4 | 2022-02-28 | Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Doctor parameter at /admin-panel1.php. |
CVE-2022-25403 | Critical | 9.8 | 2022-02-24 | HMS v1.0 was discovered to contain a SQL injection vulnerability via the component admin.php. |
CVE-2022-25402 | Critical | 9.1 | 2022-02-24 | An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files. |
CVE-2021-38757 | Medium | 6.1 | 2021-08-16 | Persistent cross-site scripting (XSS) in Hospital Management System targeted towards web admin through contact.php. |
CVE-2021-38756 | Medium | 6.1 | 2021-08-16 | Persistent cross-site scripting (XSS) in Hospital Management System targeted towards web admin through prescribe.php. |
CVE-2021-38755 | Medium | 5.3 | 2021-08-16 | Unauthenticated doctor entry deletion in Hospital Management System in admin-panel1.php. |
CVE-2021-38754 | Critical | 9.8 | 2021-08-16 | SQL Injection vulnerability in Hospital Management System due to lack of input validation in messearch.php. |