CVE-2022-32337 | Critical | 9.8 | 2022-06-14 | Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/patients/manage_patient.php?id=. |
CVE-2022-32352 | Critical | 9.8 | 2022-06-14 | Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_patient_admission. |
CVE-2022-32351 | High | 7.2 | 2022-06-14 | Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_message. |
CVE-2022-32350 | High | 7.2 | 2022-06-14 | Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_room_type. |
CVE-2022-32349 | High | 7.2 | 2022-06-14 | Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_patient_history. |
CVE-2022-32348 | High | 7.2 | 2022-06-14 | Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_doctor. |
CVE-2022-32347 | High | 7.2 | 2022-06-14 | Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_room. |
CVE-2022-32346 | High | 7.2 | 2022-06-14 | Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/rooms/view_room.php?id=. |
CVE-2022-32345 | High | 7.2 | 2022-06-14 | Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/rooms/manage_room.php?id=. |
CVE-2022-32344 | High | 7.2 | 2022-06-14 | Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_patient. |
CVE-2022-32343 | High | 7.2 | 2022-06-14 | Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via hprms/admin/room_types/manage_room_type.php?id=. |
CVE-2022-32342 | High | 7.2 | 2022-06-14 | Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/room_types/view_room_type.php?id=. |
CVE-2022-32341 | High | 7.2 | 2022-06-14 | Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/?page=user/manage_user&id=. |
CVE-2022-32340 | High | 7.2 | 2022-06-14 | Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/?page=patients/view_patient&id=. |
CVE-2022-32339 | High | 7.2 | 2022-06-14 | Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/doctors/view_doctor.php?id=. |
CVE-2022-32338 | High | 7.2 | 2022-06-14 | Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/doctors/manage_doctor.php?id=. |
CVE-2022-26244 | Medium | 5.4 | 2022-03-30 | A stored cross-site scripting (XSS) vulnerability in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML v… |
CVE-2022-25004 | Critical | 9.8 | 2022-02-24 | Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/manage_doctor.php. |
CVE-2022-25003 | Critical | 9.8 | 2022-02-24 | Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/view_doctor.php. |
CVE-2022-24232 | High | 7.8 | 2022-02-24 | A local file inclusion in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file. |
CVE-2022-22853 | Medium | 5.4 | 2022-02-16 | A stored cross-site scripting (XSS) vulnerability in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML v… |
CVE-2022-22854 | High | 8.8 | 2022-02-14 | An access control issue in hprms/admin/?page=user/list of Hospital Patient Record Management System v1.0 allows attackers to escalate privileges via accessing… |
CVE-2022-22852 | Medium | 5.4 | 2022-01-26 | A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodtester Hospital's Patient Records Management System 1.0 via the description parameter in r… |
CVE-2022-22850 | Medium | 5.4 | 2022-01-26 | A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodtester Hospital's Patient Records Management System 1.0 via the description parameter in r… |
CVE-2022-22851 | Medium | 5.4 | 2022-01-26 | A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodtester Hospital's Patient Records Management System 1.0 via the specialization parameter i… |
CVE-2022-22296 | Medium | 5.3 | 2022-01-24 | Sourcecodester Hospital's Patient Records Management System 1.0 is vulnerable to Insecure Permissions via the id parameter in manage_user endpoint. Simply chan… |