Projectworlds Hospital Management System In Php
7 CVEs affecting Projectworlds Hospital Management System In Php. Latest disclosed: 2023-09-28. Critical: 5, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-5053 | Critical | 9.8 | 2023-09-28 | Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI. |
CVE-2023-5004 | Critical | 9.8 | 2023-09-28 | Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI. |
CVE-2021-43631 | Critical | 9.8 | 2021-12-22 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointment_no parameter in payment.php. |
CVE-2021-43629 | Critical | 9.8 | 2021-12-22 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in admin_home.php. |
CVE-2021-43628 | Critical | 9.8 | 2021-12-22 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php. |
CVE-2021-43630 | High | 8.8 | 2021-12-22 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in add_patient.php. As a result, an authenticated maliciou… |
CVE-2021-45852 | Medium | 5.3 | 2022-03-16 | An issue was discovered in Projectworlds Hospital Management System v1.0. Unauthorized malicious attackers can add patients without restriction via add_patient… |