Browse CVEs

MEDIUM 6.1 CVE-2025-63514 kishan0725 Hospital Management System has a Cross-Site Scripting (XSS) vulnerability in appsearch.php via the email parameter. Hospital Management System No fix yet Fix from $1,6002025-11-18 MEDIUM 6.5 CVE-2025-63513 kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference (IDOR) vulnerability in the appointment cancellation functionality. Hospital Management System No fix yet Fix from $1,6002025-11-18 MEDIUM 6.5 CVE-2025-63512 kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The applicat… Hospital Management System No fix yet Fix from $1,6002025-11-18 CRITICAL 9.8 CVE-2023-41525 Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patient_contact parameter in patientsearch.php. Hospital Management System Mitigation only Fix from $2,3002025-08-07 CRITICAL 9.8 CVE-2023-41526 Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func1.php via the username3 and password3 parameter… Hospital Management System Mitigation only Fix from $2,3002025-08-07 CRITICAL 9.8 CVE-2023-41527 Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php. Hospital Management System Mitigation only Fix from $2,3002025-08-07 CRITICAL 9.8 CVE-2023-41528 Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the txtname, txtphone, and txtmail … Hospital Management System Mitigation only Fix from $2,3002025-08-07 CRITICAL 9.8 CVE-2023-41530 Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the app_contact parameter in appsearch.php. Hospital Management System Mitigation only Fix from $2,3002025-08-07 HIGH 8.8 CVE-2023-41531 Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameter… Hospital Management System Mitigation only Fix from $1,9502025-08-07 HIGH 8.8 CVE-2023-41532 Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctor_contact parameter in doctorsearch.php. Hospital Management System Mitigation only Fix from $1,9502025-08-07 MEDIUM 6.1 CVE-2023-41529 Hospital Management System v4 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in func2.php via the fname and lname para… Hospital Management System Mitigation only Fix from $1,6002025-08-07 MEDIUM 6.5 CVE-2023-40992 Hospital Management System 4 is vulnerable to a SQL injection in /Hospital-Management-System-master/func.php via the password2 parameter. Hospital Management System Mitigation only Fix from $1,6002025-08-07 CRITICAL 9.8 CVE-2023-43958 An arbitrary file upload vulnerability in the component /jquery-file-upload/server/php/index.php of Hospital Management System v4.0 allows an unauthe… Hospital Management System No fix yet Fix from $2,3002025-04-22 MEDIUM 6.3 CVE-2024-45983 A Cross-Site Request Forgery (CSRF) vulnerability exists in kishan0725's Hospital Management System version 6.3.5. The vulnerability allows an attack… Hospital Management System No fix yet Fix from $1,6002024-09-26