Description (CNA)
Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Hospital-management-system / Hospital-management-system | affected 378c157 |
CWE
CWE-89
References
- https://fluidattacks.com/advisories/alcocer
- https://github.com/projectworldsofficial/hospital-management-system-in-php/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.