Codeastro Hospital Management System vulnerabilities

CVE-2024-11676 [MEDIUM] CWE-79 CVE-2024-11676: A vulnerability was found in CodeAstro Hospital Management System 1.0 and classified as problematic. A vulnerability was found in CodeAstro Hospital Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /backend/admin/his_admin_add_lab_equipment.php of the component Add Laboratory Equipment Page. The manipulation of the argument eqp_code/eqp_name/eqp_vendor/eqp_desc/eqp_dept/eqp_status/

CVE-2024-11677 [MEDIUM] CWE-79 CVE-2024-11677: A vulnerability was found in CodeAstro Hospital Management System 1.0. It has been classified as pro A vulnerability was found in CodeAstro Hospital Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /backend/admin/his_admin_add_vendor.php of the component Add Vendor Details Page. The manipulation of the argument v_name/v_adr/v_number/v_email/v_phone/v_desc leads to cross site scripting. It is poss

CVE-2024-11678 [MEDIUM] CWE-79 CVE-2024-11678: A vulnerability was found in CodeAstro Hospital Management System 1.0. It has been declared as probl A vulnerability was found in CodeAstro Hospital Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /backend/doc/his_doc_register_patient.php. The manipulation of the argument pat_fname/pat_ailment/pat_lname/pat_age/pat_dob/pat_number/pat_phone/pat_type/pat_addr leads to cross site scripting

CVE-2024-11675 [MEDIUM] CWE-79 CVE-2024-11675: A vulnerability has been found in CodeAstro Hospital Management System 1.0 and classified as problem A vulnerability has been found in CodeAstro Hospital Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /backend/admin/his_admin_register_patient.php of the component Add Patient Details Page. The manipulation of the argument pat_fname/pat_ailment/pat_lname/pat_age/pat_dob/pat_n

CVE-2024-11674 [MEDIUM] CWE-284 CVE-2024-11674: A vulnerability, which was classified as critical, was found in CodeAstro Hospital Management System A vulnerability, which was classified as critical, was found in CodeAstro Hospital Management System 1.0. Affected is an unknown function of the file /backend/doc/his_doc_update-account.php. The manipulation of the argument doc_dpic leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the publ