CVE-2023-41528
- EPSS 0.04%
- Veröffentlicht 07.08.2025 00:00:00
- Zuletzt bearbeitet 11.08.2025 14:45:05
Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the txtname, txtphone, and txtmail parameters.
CVE-2023-41529
- EPSS 0.03%
- Veröffentlicht 07.08.2025 00:00:00
- Zuletzt bearbeitet 11.08.2025 14:45:13
Hospital Management System v4 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in func2.php via the fname and lname parameters.
CVE-2023-43958
- EPSS 3.78%
- Veröffentlicht 22.04.2025 00:00:00
- Zuletzt bearbeitet 14.05.2025 13:14:04
An arbitrary file upload vulnerability in the component /jquery-file-upload/server/php/index.php of Hospital Management System v4.0 allows an unauthenticated attacker to upload any file to the server and execute arbitrary code.
CVE-2024-45983
- EPSS 0.18%
- Veröffentlicht 26.09.2024 16:15:08
- Zuletzt bearbeitet 16.05.2025 20:29:29
A Cross-Site Request Forgery (CSRF) vulnerability exists in kishan0725's Hospital Management System version 6.3.5. The vulnerability allows an attacker to craft a malicious HTML form that submits a request to delete a doctor record. By enticing an au...