CVE-2024-10807 — Injection in Hospital Management System

CWE-74 — Injection CWE-79 — Cross-site Scripting CWE-707 — Improper Neutralization3 documents3 sources

Severity

5.1MEDIUMNVD

EPSS

0.1%

top 70.16%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Phpgurukul Hospital Management System Anujkumar Hospital Management System

Timeline

PublishedNov 5

Description

A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been rated as problematic. This issue affects some unknown processing of the file hms/doctor/search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5phpgurukul/hospital_management_system4.0

▶NVDanujkumar/hospital_management_system4.0

🔴Vulnerability Details

GHSA

GHSA-953x-6wwg-wcxg: A vulnerability was found in PHPGurukul Hospital Management System 4↗2024-11-05

▶

CVEList

PHPGurukul Hospital Management System search.php cross site scripting↗2024-11-05

▶