| Package | Affected versions | Patched versions |
|---|---|---|
| hospital management system | = 1.0 |
The patient prescription viewing functionality in his_doc_view_single_patient.php of rickxy Hospital Management System version 1.0 contains an SQL injection vulnerability. The pat_number GET parameter is directly concatenated into SQL queries without proper sanitization, allowing authenticated attackers (doctor role) to execute arbitrary SQL queries.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free