Onetwothreeneth vulnerabilities
We track 6 vulnerabilities in Onetwothreeneth products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on October 5, 2026.
Latest Onetwothreeneth vulnerabilities
- 7.3 High severity
HospitalManagementSystem: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this issue is the function get of the file print.php. The manipulation of the argument transaction_id leads to sql injection.
- 7.3 High severity
HospitalManagementSystem: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was determined in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this vulnerability is an unknown functionality of the file transaction_details.php. Executing a manipulation of the argument
- 7.3 High severity
HospitalManagementSystem: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This impacts an unknown function of the file php/controller.php. Such manipulation of the argument transaction_idS leads to sql injection
- 7.3 High severity
HospitalManagementSystem: Incorrect Privilege Assignment
A flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function update_subaccount of the file php/controller.php of the component Account Administration. This manipulation of the argum
- 7.3 High severity
HospitalManagementSystem: Improper Access Control
A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function add_patient/add_physician/add_account/update_account/update_subaccount/edit_physician/edit_patient o
- 7.3 High severity
HospitalManagementSystem: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function get of the file edit_accounts.php. This manipulation of the argument user_id/patient_id/physician_id/discounts_