| عنوان | PHPGurukul Hospital Management System 4.0 Cross Site Scripting |
|---|
| الوصف | A time-based blind and Union SQL injection vulnerability exists in the searchdata parameter of Hospital Management System v4.0, allowing remote attackers to execute arbitrary SQL commands by triggering with union and time delays in the database response. |
|---|
| المصدر | ⚠️ https://github.com/Ant1sec-ops/HMS4.0-Avdisories/blob/main/Union-based-sqli-on-doctor-search/exploit.md |
|---|
| المستخدم | Subhash Paudel (UID 66830) |
|---|
| ارسال | 20/06/2025 09:04 PM (1 سنة منذ) |
|---|
| الاعتدال | 24/06/2025 10:14 AM (4 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 313742 [PHPGurukul Hospital Management System 4.0 /doctor/search.php searchdata حقن SQL] |
|---|
| النقاط | 17 |
|---|