CyberSec.Space Logo
Back to CVE Browser

CVE-2020-22165

HIGH
7.5
CVSS Severity Score
EPSS Score0.0560%
EPSS Percentile29.01th
PublishedJun 22, 2021
Last ModifiedNov 21, 2024

Vulnerability Description

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.

Affected Platforms (CPE)

📦
Phpgurukul

Hospital Management System

= 4.0

References & Advisories

🔗 https://github.com/itodaro/PHPGurukul_Hospital_Management_System4.0_cve
🔗 https://github.com/itodaro/PHPGurukul_Hospital_Management_System4.0_cve

Related Vulnerabilities

CVE-2020-266299.8

A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows an unauth...

CVE-2021-387549.8

SQL Injection vulnerability in Hospital Management System due to lack of input validation in messearch.php.

CVE-2018-173939.8

SQL Injection exists in HealthNode Hospital Management System 1.0 via the id parameter to dashboard/Patient/info.php or dashboard/...

CVE-2021-436289.8

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php.