Hospital Management System vulnerabilities
6 known vulnerabilities in Hospital Management System from Kishan0725. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.3 High severity
Hospital Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. This affects the function mysqli_query of the file admin-panel.php of the component Appointment Cancellation Handler. Executing a manipulati
- 7.3 High severity
Hospital-Management-System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in kishan0725 Hospital-Management-System 1.0. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument Contact results in sql injection. It is possible to launch the attack remotely.
- 8.8 High severity
Hospital Management System: Improper Neutralization of Special Elements used in an SQL Command
Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters.
- 9.8 Critical severity
Hospital Management System: Improper Neutralization of Special Elements used in an SQL Command
Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the txtname, txtphone, and txtmail parameters.
- 9.8 Critical severity
Hospital Management System: Improper Neutralization of Special Elements used in an SQL Command
Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func1.php via the username3 and password3 parameters.
- 9.8 Critical severity
Hospital Management System: Improper Control of Generation of Code
An arbitrary file upload vulnerability in the component /jquery-file-upload/server/php/index.php of Hospital Management System v4.0 allows an unauthenticated attacker to upload any file to the server and execute arbitrary code.