CyberSec.Space Logo
返回 CVE 浏览器

CVE-2020-22164

HIGH
7.5
CVSS Severity Score
EPSS Score0.0610%
EPSS Percentile31.21th
Published2021年6月22日
Last Modified2024年11月21日

Vulnerability Description

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\check_availability.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.

Affected Platforms (CPE)

📦
Phpgurukul

Hospital Management System

= 4.0

References & Advisories

🔗 https://github.com/itodaro/PHPGurukul_Hospital_Management_System4.0_cve
🔗 https://github.com/itodaro/PHPGurukul_Hospital_Management_System4.0_cve

相关漏洞威胁

CVE-2020-266299.8

A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows an unauth...

CVE-2021-387549.8

SQL Injection vulnerability in Hospital Management System due to lack of input validation in messearch.php.

CVE-2018-173939.8

SQL Injection exists in HealthNode Hospital Management System 1.0 via the id parameter to dashboard/Patient/info.php or dashboard/...

CVE-2021-436289.8

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php.