HM
Product
Hospital Management System
69
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 26Medium 27Low 1
Watch
Add Hospital Management System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-70063 | 6.5 | Feb 18 | The 'Medical History' module in PHPGurukul Hospital Management System v4.0 contains an Insecure Direct Object Reference (IDOR) vulnerability Affected: 4.0 |
| CVE-2025-70062 | 6.5 | Feb 18 | PHPGurukul Hospital Management System v4.0 contains a Cross-Site Request Forgery (CSRF) vulnerability in the 'Add Doctor' module Affected: 4.0 |
| CVE-2025-56215 | 6.5 | Aug 25 | phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in contact.php via the pagetitle parameter Affected: 4.0 |
| CVE-2020-26628 | 6.1 | Jan 10 | A Cross-Site Scripting (XSS) vulnerability was discovered in Hospital Management System V4.0 which allows an attacker to execute arbitrary web scripts or HTML code via a malicious… Affected: 4.0 |
| CVE-2024-0286 | 6.1 | Jan 7 | A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0 Affected: 1.0 |
| CVE-2021-39411 | 6.1 | Nov 5 | Multiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the (1) searchdata parameter in (a) doctor/search.php and (b)… Affected: 4.0 |
| CVE-2020-5193 | 6.1 | Jan 14 | PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple reflected XSS vulnerabilities via the searchdata or Doctorspecialization parameter Affected: 4.0 |
| CVE-2020-5191 | 6.1 | Jan 6 | PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple Persistent XSS vulnerabilities Affected: 4.0 |
| CVE-2024-46238 | 5.9 | Oct 21 | Multiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /admin/add-doctor.php and /admin/edit-doctor.php Affected: 4.0 |
| CVE-2024-46239 | 5.9 | Oct 21 | Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /doctor/edit-profile.php and adminremark parameter in… Affected: 4.0 |
| CVE-2025-6613 | 5.4 | Jun 25 | PHPGurukul Hospital Management System manage-patient.php cross site scripting Affected: 4.0 |
| CVE-2025-5584 | 5.4 | Jun 4 | PHPGurukul Hospital Management System POST Parameter edit-patient.php cross site scripting Affected: 4.0 |
| CVE-2024-11675 | 5.4 | Nov 26 | CodeAstro Hospital Management System Add Patient Details Page his_admin_register_patient.php cross site scripting Affected: 1.0 |
| CVE-2024-46237 | 5.4 | Oct 9 | PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) via the patname, pataddress, and medhis parameters in doctor/add-patient.php and… Affected: 4.0 |
| CVE-2023-7173 | 5.4 | Dec 30 | A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0 Affected: 1.0 |
| CVE-2021-35388 | 5.4 | Oct 28 | Hospital Management System v 4.0 is vulnerable to Cross Site Scripting (XSS) via /hospital/hms/admin/patient-search.php Affected: 4.0 |
| CVE-2022-42205 | 5.4 | Oct 21 | PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via add-patient.php Affected: 4.0 |
| CVE-2022-42206 | 5.4 | Oct 21 | PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php Affected: 4.0 |
| CVE-2020-22167 | 5.4 | Jun 22 | PHPGurukul Hospital Management System in PHP v4.0 has a Persistent Cross-Site Scripting vulnerability in \hms\admin\appointment-history.php Affected: 4.0 |
| CVE-2020-25271 | 5.4 | Oct 8 | PHPGurukul hospital-management-system-in-php 4.0 allows XSS via admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, or… Affected: 4.0 |
| CVE-2020-26630 | 4.9 | Jan 10 | A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a special payload in the… Affected: 4.0 |
| CVE-2020-26627 | 4.9 | Jan 10 | A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a crafted payload entered… Affected: 4.0 |
| CVE-2024-10807 | 4.8 | Nov 5 | PHPGurukul Hospital Management System search.php cross site scripting Affected: 4.0 |
| CVE-2024-10806 | 4.8 | Nov 5 | PHPGurukul Hospital Management System betweendates-detailsreports.php cross site scripting Affected: 4.0 |
| CVE-2024-56990 | 4.5 | Jan 21 | PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /view-medhistory.php and /admin/view-patient.php Affected: 4.0 |
| CVE-2024-56997 | 4.2 | Jan 21 | PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /doctor/index.php via the 'Email' parameter Affected: 4.0 |
| CVE-2024-56998 | 4.2 | Jan 21 | PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /edit-profile.php via the parameter $address Affected: 4.0 |
Showing 27