Описание
A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a crafted payload entered into the 'Admin Remark' parameter under the 'Contact Us Queries -> Unread Query' tab.
Ссылки
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:phpgurukul:hospital_management_system:4.0:*:*:*:*:*:*:*
EPSS
Процентиль: 32%
0.00123
Низкий
4.9 Medium
CVSS3
Дефекты
CWE-89
CWE-89
Связанные уязвимости
CVSS3: 4.9
github
около 2 лет назад
A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a crafted payload entered into the 'Admin Remark' parameter under the 'Contact Us Queries -> Unread Query' tab.
EPSS
Процентиль: 32%
0.00123
Низкий
4.9 Medium
CVSS3
Дефекты
CWE-89
CWE-89