← Back

Clinic's Patient Management System

clinic's_patient_management_system

Vendor: Oretnom23 • 27 CVEs

CVEs (27)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-36251
1Oretnom23
1Clinic's Patient Management System
Nov 21, 2024
Aug 22, 2022
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Clinic's Patient Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via patients.php.
CVE-2022-35117
1Oretnom23
1Clinic's Patient Management System
Nov 21, 2024
Aug 17, 2022
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Clinic's Patient Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via update_medicine_details.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML v...Show more
Clinic's Patient Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via update_medicine_details.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Packing text box under the Update Medical Details module.Show less
CVE-2022-36242
1Oretnom23
1Clinic's Patient Management System
Nov 21, 2024
Aug 16, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Clinic's Patient Management System v1.0 is vulnerable to SQL Injection via /pms/update_medicine.php?id=.
CVE-2022-36750
1Oretnom23
1Clinic's Patient Management System
Nov 21, 2024
Aug 10, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Clinic's Patient Management System v1.0 is vulnerable to SQL injection via /pms/update_user.php?id=.
CVE-2022-36270
1Oretnom23
1Clinic's Patient Management System
Nov 21, 2024
Aug 10, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Clinic's Patient Management System v1.0 has arbitrary code execution via url: ip/pms/users.php.
CVE-2022-2298
1Oretnom23
1Clinic's Patient Management System
Nov 21, 2024
Jul 12, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A vulnerability has been found in SourceCodester Clinics Patient Management System 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pms/index.php of the component Lo...Show more
A vulnerability has been found in SourceCodester Clinics Patient Management System 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pms/index.php of the component Login Page. The manipulation of the argument user_name with the input admin' or '1'='1 leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.Show less
CVE-2022-2297
1Oretnom23
1Clinic's Patient Management System
Nov 21, 2024
Jul 12, 2022
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0. Affected is an unknown function of the file /pms/update_user.php?user_id=1. The manipulation of the ar...Show more
A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0. Affected is an unknown function of the file /pms/update_user.php?user_id=1. The manipulation of the argument profile_picture with the input <?php phpinfo();?> leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.Show less