PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\get_doctor.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.
References
Link | Resource |
---|---|
https://github.com/itodaro/PHPGurukul_Hospital_Management_System4.0_cve | Exploit Third Party Advisory |
Configurations
Information
Published : 2021-06-22 08:15
Updated : 2021-06-24 06:41
NVD link : CVE-2020-22172
Mitre link : CVE-2020-22172
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
phpgurukul
- hospital_management_system_in_php