CVE-2022-22853

概要

参考情報

• Dheeraj-Deshmukh/stored-xss-in-Hospital-s-Patient-Records-Management-System · Exploit
• sourcecodester.com/php/15116/hospitals-patient-records-management-system-php-free-source-code.html · Product
• sourcecodester.com/sites/default/files/download/oretnom23/hprms_0.zip · Third Party Advisory

hospital's patient records management system のその他の脆弱性

• CVE-2022-32337緊急 9.8Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/patients/manage_patient.php?id=.
• CVE-2022-32352緊急 9.8Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_patient_admission.
• CVE-2022-32351高 7.2Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_message.
• CVE-2022-32350高 7.2Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_room_type.
• CVE-2022-32349高 7.2Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_patient_history.