| عنوان | PHPGurukul Hospital Management System 4.0 SQL Injection |
|---|
| الوصف | A time-based blind SQL injection vulnerability exists in the Doctorspecialization parameter of Hospital Management System v4.0, allowing remote attackers to execute arbitrary SQL commands by triggering time delays in the database response.
Affected file path: hospital/hms/doctor/edit-profile.php |
|---|
| المصدر | ⚠️ https://github.com/Ant1sec-ops/HMS4.0-Avdisories/blob/main/Time-based-blind-sql-on-doctor-edit-profile/Exploit.md |
|---|
| المستخدم | Subhash Paudel (UID 66830) |
|---|
| ارسال | 08/06/2025 08:22 PM (1 سنة منذ) |
|---|
| الاعتدال | 15/06/2025 12:44 PM (7 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 177397 [PHPGurukul Hospital Management System in PHP 4.0 \hms\edit-profile.php حقن SQL] |
|---|
| النقاط | 0 |
|---|