Phpgurukul Hospital Management System vulnerabilities

CVE-2024-46237 [MEDIUM] CWE-79 CVE-2024-46237: PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) via the patnam PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) via the patname, pataddress, and medhis parameters in doctor/add-patient.php and doctor/edit-patient.php.

CVE-2024-10806 [MEDIUM] CWE-74 CVE-2024-10806: A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been declared as prob A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been declared as problematic. This vulnerability affects unknown code of the file betweendates-detailsreports.php. The manipulation of the argument fromdate/todate leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the pu

CVE-2024-46239 [MEDIUM] CWE-79 CVE-2024-46239: Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /doctor/edit-profile.php and adminremark parameter in /admin/query-details.php.

CVE-2024-46238 [MEDIUM] CWE-79 CVE-2024-46238: Multiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management System 4 Multiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /admin/add-doctor.php and /admin/edit-doctor.php

CVE-2022-42205 [MEDIUM] CWE-79 CVE-2022-42205: PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via a PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via add-patient.php.

CVE-2024-56990 [MEDIUM] CWE-79 CVE-2024-56990: PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /view-medhi PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /view-medhistory.php and /admin/view-patient.php.

CVE-2024-56998 [MEDIUM] CWE-79 CVE-2024-56998: PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /edit-profi PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /edit-profile.php via the parameter $address.

CVE-2024-56997 [MEDIUM] CWE-79 CVE-2024-56997: PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /doctor/ind PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /doctor/index.php via the 'Email' parameter.

CVE-2022-46498 [LOW] CWE-89 CVE-2022-46498: Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the doc_n Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the doc_number parameter at his_admin_view_single_employee.php.