Hospital's Patient Records Management System vulnerabilities

3 known vulnerabilities in Hospital's Patient Records Management System from Hospital's Patient Records Management System Project. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Hospital's Patient Records Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-25004Feb 24, 2022Hospital's Patient Records Management System ProjectEPSS 1.65%

  Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/manage_doctor.php.

• 9.8 Critical severity

  Hospital's Patient Records Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-25003Feb 24, 2022Hospital's Patient Records Management System ProjectEPSS 1.65%

  Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/view_doctor.php.

• 8.8 High severity

  Hospital's Patient Records Management System: Missing Authorization

  CVE-2022-22854Feb 14, 2022Hospital's Patient Records Management System Project

  An access control issue in hprms/admin/?page=user/list of Hospital Patient Record Management System v1.0 allows attackers to escalate privileges via accessing and editing the user list.