Vulnerability index

Browse CVEs

43 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

CRITICAL 9.8 CVE-2022-25490 HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in department.php. Hospital Management System No fix yet Fix from $2,3002022-03-15 CRITICAL 9.8 CVE-2022-25492 HMS v1.0 was discovered to contain a SQL injection vulnerability via the medicineid parameter in ajaxmedicine.php. Hospital Management System No fix yet Fix from $2,3002022-03-15 HIGH 7.5 CVE-2022-25491 HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in appointment.php. Hospital Management System No fix yet Fix from $1,9502022-03-15 MEDIUM 6.1 CVE-2022-25493 HMS v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via treatmentrecord.php. Hospital Management System No fix yet Fix from $1,6002022-03-15 MEDIUM 5.4 CVE-2022-25407 Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Doctor parameter at /admin-panel1… Hospital Management System No fix yet Fix from $1,6002022-02-28 MEDIUM 5.4 CVE-2022-25408 Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the dpassword parameter at /admin-pan… Hospital Management System No fix yet Fix from $1,6002022-02-28 MEDIUM 5.4 CVE-2022-25409 Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the demail parameter at /admin-panel1… Hospital Management System No fix yet Fix from $1,6002022-02-28 CRITICAL 9.8 CVE-2022-25403 HMS v1.0 was discovered to contain a SQL injection vulnerability via the component admin.php. Hospital Management System No fix yet Fix from $2,3002022-02-24 CRITICAL 9.1 CVE-2022-25402 An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files. Hospital Management System No fix yet Fix from $2,3002022-02-24 CRITICAL 9.8 CVE-2021-38754 SQL Injection vulnerability in Hospital Management System due to lack of input validation in messearch.php. Hospital Management System No fix yet Fix from $2,3002021-08-16 MEDIUM 6.1 CVE-2021-38756 Persistent cross-site scripting (XSS) in Hospital Management System targeted towards web admin through prescribe.php. Hospital Management System No fix yet Fix from $1,6002021-08-16 MEDIUM 6.1 CVE-2021-38757 Persistent cross-site scripting (XSS) in Hospital Management System targeted towards web admin through contact.php. Hospital Management System No fix yet Fix from $1,6002021-08-16 MEDIUM 5.3 CVE-2021-38755 Unauthenticated doctor entry deletion in Hospital Management System in admin-panel1.php. Hospital Management System No fix yet Fix from $1,6002021-08-16