Vulnerabilities (CVE)

Filtered by vendor Projectworlds Subscribe
Filtered by product Hospital Management System In Php
Total 5 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-45852 1 Projectworlds 1 Hospital Management System In Php 2024-02-04 5.0 MEDIUM 5.3 MEDIUM
An issue was discovered in Projectworlds Hospital Management System v1.0. Unauthorized malicious attackers can add patients without restriction via add_patient.php.
CVE-2021-43628 1 Projectworlds 1 Hospital Management System In Php 2024-02-04 7.5 HIGH 9.8 CRITICAL
Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php.
CVE-2021-43630 1 Projectworlds 1 Hospital Management System In Php 2024-02-04 6.5 MEDIUM 8.8 HIGH
Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in add_patient.php. As a result, an authenticated malicious user can compromise the databases system and in some cases leverage this vulnerability to get remote code execution on the remote web server.
CVE-2021-43631 1 Projectworlds 1 Hospital Management System In Php 2024-02-04 7.5 HIGH 9.8 CRITICAL
Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointment_no parameter in payment.php.
CVE-2021-43629 1 Projectworlds 1 Hospital Management System In Php 2024-02-04 7.5 HIGH 9.8 CRITICAL
Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in admin_home.php.