Vulnerability index

Browse CVEs

43 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Hospital Management System CRITICAL 9.8
CVE-2022-25490

HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in department.php.

No fix yet
Fix from $2,300 2022-03-15
Hospital Management System CRITICAL 9.8
CVE-2022-25492

HMS v1.0 was discovered to contain a SQL injection vulnerability via the medicineid parameter in ajaxmedicine.php.

No fix yet
Fix from $2,300 2022-03-15
Hospital Management System HIGH 7.5
CVE-2022-25491

HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in appointment.php.

No fix yet
Fix from $1,950 2022-03-15
Hospital Management System MEDIUM 6.1
CVE-2022-25493

HMS v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via treatmentrecord.php.

No fix yet
Fix from $1,600 2022-03-15
Hospital Management System MEDIUM 5.4
CVE-2022-25407

Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Doctor parameter at /admin-panel1…

No fix yet
Fix from $1,600 2022-02-28
Hospital Management System MEDIUM 5.4
CVE-2022-25408

Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the dpassword parameter at /admin-pan…

No fix yet
Fix from $1,600 2022-02-28
Hospital Management System MEDIUM 5.4
CVE-2022-25409

Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the demail parameter at /admin-panel1…

No fix yet
Fix from $1,600 2022-02-28
Hospital Management System CRITICAL 9.8
CVE-2022-25403

HMS v1.0 was discovered to contain a SQL injection vulnerability via the component admin.php.

No fix yet
Fix from $2,300 2022-02-24
Hospital Management System CRITICAL 9.1
CVE-2022-25402

An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files.

No fix yet
Fix from $2,300 2022-02-24
Hospital Management System CRITICAL 9.8
CVE-2021-38754

SQL Injection vulnerability in Hospital Management System due to lack of input validation in messearch.php.

No fix yet
Fix from $2,300 2021-08-16
Hospital Management System MEDIUM 6.1
CVE-2021-38756

Persistent cross-site scripting (XSS) in Hospital Management System targeted towards web admin through prescribe.php.

No fix yet
Fix from $1,600 2021-08-16
Hospital Management System MEDIUM 6.1
CVE-2021-38757

Persistent cross-site scripting (XSS) in Hospital Management System targeted towards web admin through contact.php.

No fix yet
Fix from $1,600 2021-08-16
Hospital Management System MEDIUM 5.3
CVE-2021-38755

Unauthenticated doctor entry deletion in Hospital Management System in admin-panel1.php.

No fix yet
Fix from $1,600 2021-08-16