Hospital's Patient Records Management System Project vulnerabilities
We track 3 vulnerabilities in Hospital's Patient Records Management System Project products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 24, 2022.
3vulnerabilities
2critical
1high
0exploited
9.5average CVSS score
Latest Hospital's Patient Records Management System Project vulnerabilities
- 9.8 Critical severity
Hospital's Patient Records Management System: Improper Neutralization of Special Elements used in an SQL Command
Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/manage_doctor.php.
- 9.8 Critical severity
Hospital's Patient Records Management System: Improper Neutralization of Special Elements used in an SQL Command
Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/view_doctor.php.
- 8.8 High severity
Hospital's Patient Records Management System: Missing Authorization
An access control issue in hprms/admin/?page=user/list of Hospital Patient Record Management System v1.0 allows attackers to escalate privileges via accessing and editing the user list.