HM
Product
Hospital Management System
45
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 27High 7Medium 11Low 0
Watch
Add Hospital Management System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-40502 | 9.8 | Jul 22 | SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to execute arbitrary code via the btn_login_b_Click function of the… Affected: 1.0 |
| CVE-2023-4176 | 9.8 | Aug 6 | SourceCodester Hospital Management System appointmentapproval.php sql injection Affected: 1.0 |
| CVE-2023-3811 | 9.8 | Jul 21 | Hospital Management System patientprofile.php sql injection Affected: 1.0 |
| CVE-2023-3810 | 9.8 | Jul 21 | Hospital Management System patientappointment.php sql injection Affected: 1.0 |
| CVE-2023-3809 | 9.8 | Jul 21 | Hospital Management System patient.php sql injection Affected: 1.0 |
| CVE-2022-48120 | 9.8 | Jan 20 | SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9bd (on March 13, 2021), allows attackers to execute… Affected: through 2021-03-13 |
| CVE-2022-38637 | 9.8 | Sep 13 | Hospital Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the Username and Password parameters on the Login page Affected: 1.0 |
| CVE-2022-32095 | 9.8 | Jul 1 | Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at orders.php Affected: 1.0 |
| CVE-2022-32094 | 9.8 | Jul 1 | Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doctorlogin.php Affected: 1.0 |
| CVE-2022-32093 | 9.8 | Jul 1 | Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at adminlogin.php Affected: 1.0 |
| CVE-2021-44095 | 9.8 | May 31 | A SQL injection vulnerability exists in ProjectWorlds Hospital Management System in php 1.0 on login page that allows a remote attacker to compromise Application SQL database Affected: 1.0 |
| CVE-2022-30516 | 9.8 | May 26 | In Hospital-Management-System v1.0, the editid parameter in the doctor.php page is vulnerable to SQL injection attacks Affected: 1.0 |
| CVE-2022-30011 | 9.8 | May 16 | In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability Affected: 1.0 |
| CVE-2022-28929 | 9.8 | May 15 | Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the delid parameter at viewtreatmentrecord.php Affected: 1.0 |
| CVE-2022-30449 | 9.8 | May 11 | Hospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in room.php Affected: 1.0 |
| CVE-2022-30448 | 9.8 | May 11 | Hospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a File upload vulnerability in treatmentrecord.php Affected: 1.0 |
| CVE-2022-27420 | 9.8 | May 4 | Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the patient_contact parameter in patientsearch.php Affected: 1.0 |
| CVE-2022-27413 | 9.8 | May 3 | Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the adminname parameter in admin.php Affected: 1.0 |
| CVE-2022-27299 | 9.8 | Apr 26 | Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the component room.php Affected: 1.0 |
| CVE-2022-24136 | 9.8 | Mar 31 | Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php Affected: 1.0 |
| CVE-2022-25490 | 9.8 | Mar 15 | HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in department.php Affected: 1.0 |
| CVE-2022-25492 | 9.8 | Mar 15 | HMS v1.0 was discovered to contain a SQL injection vulnerability via the medicineid parameter in ajaxmedicine.php Affected: 1.0 |
| CVE-2022-25403 | 9.8 | Feb 23 | HMS v1.0 was discovered to contain a SQL injection vulnerability via the component admin.php Affected: 1.0 |
| CVE-2021-38754 | 9.8 | Aug 16 | SQL Injection vulnerability in Hospital Management System due to lack of input validation in messearch.php Affected: All versions, or not specified |
| CVE-2023-43909 | 9.1 | Sep 29 | Hospital Management System thru commit 4770d was discovered to contain a SQL injection vulnerability via the app_contact parameter in appsearch.php Affected: All versions, or not specified |
| CVE-2022-26546 | 9.1 | Mar 31 | Hospital Management System v1.0 was discovered to lack an authorization component, allowing attackers to access sensitive information and obtain the admin password Affected: 1.0 |
| CVE-2022-25402 | 9.1 | Feb 23 | An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files Affected: 1.0 |
Showing 27