CVE-2022-4012 — Hospital Management Center patient-info.php sql injection

CVE-2022-4012

Hospital Management Center patient-info.php sql injection PUBLISHED

Description (CNA)

A vulnerability classified as critical has been found in Hospital Management Center. Affected is an unknown function of the file patient-info.php. The manipulation of the argument pt_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-213786 is the identifier assigned to this vulnerability.

Affected (CNA)

Vendor / product	Versions
unspecified / Hospital Management Center	affected n/a

CWE

CWE-707

References

https://github.com/golamsarwar08/hms/issues/1
https://vuldb.com/?id.213786

ADP enrichment

CVE

No English description supplied.

https://github.com/golamsarwar08/hms/issues/1
https://vuldb.com/?id.213786

CISA-ADP

No English description supplied.

No references supplied.