HM
Product
Hospital Management System
69
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 26Medium 27Low 1
Watch
Add Hospital Management System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-46239 | 5.9 | Oct 21 | Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /doctor/edit-profile.php and adminremark parameter in… Affected: 4.0 |
| CVE-2025-6613 | 5.4 | Jun 25 | PHPGurukul Hospital Management System manage-patient.php cross site scripting Affected: 4.0 |
| CVE-2025-5584 | 5.4 | Jun 4 | PHPGurukul Hospital Management System POST Parameter edit-patient.php cross site scripting Affected: 4.0 |
| CVE-2024-11675 | 5.4 | Nov 26 | CodeAstro Hospital Management System Add Patient Details Page his_admin_register_patient.php cross site scripting Affected: 1.0 |
| CVE-2024-46237 | 5.4 | Oct 9 | PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) via the patname, pataddress, and medhis parameters in doctor/add-patient.php and… Affected: 4.0 |
| CVE-2023-7173 | 5.4 | Dec 30 | A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0 Affected: 1.0 |
| CVE-2021-35388 | 5.4 | Oct 28 | Hospital Management System v 4.0 is vulnerable to Cross Site Scripting (XSS) via /hospital/hms/admin/patient-search.php Affected: 4.0 |
| CVE-2022-42205 | 5.4 | Oct 21 | PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via add-patient.php Affected: 4.0 |
| CVE-2022-42206 | 5.4 | Oct 21 | PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php Affected: 4.0 |
| CVE-2020-22167 | 5.4 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a Persistent Cross-Site Scripting vulnerability in \hms\admin\appointment-history.php Affected: 4.0 |
| CVE-2020-25271 | 5.4 | Oct 8 | PHPGurukul hospital-management-system-in-php 4.0 allows XSS via admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, or… Affected: 4.0 |
| CVE-2020-26630 | 4.9 | Jan 10 | A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a special payload in the… Affected: 4.0 |
| CVE-2020-26627 | 4.9 | Jan 10 | A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a crafted payload entered… Affected: 4.0 |
| CVE-2024-10807 | 4.8 | Nov 5 | PHPGurukul Hospital Management System search.php cross site scripting Affected: 4.0 |
| CVE-2024-10806 | 4.8 | Nov 5 | PHPGurukul Hospital Management System betweendates-detailsreports.php cross site scripting Affected: 4.0 |
| CVE-2024-56990 | 4.5 | Jan 21 | PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /view-medhistory.php and /admin/view-patient.php Affected: 4.0 |
| CVE-2024-56997 | 4.2 | Jan 21 | PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /doctor/index.php via the 'Email' parameter Affected: 4.0 |
| CVE-2024-56998 | 4.2 | Jan 21 | PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /edit-profile.php via the parameter $address Affected: 4.0 |
| CVE-2022-46498 | 2.7 | Mar 7 | Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the doc_number parameter at his_admin_view_single_employee.php Affected: 1.0 |