| Titel | PHPGurukul Hospital-Management-System 4.0 SQL Injection |
|---|
| Beschreibung | A time-based blind SQL injection vulnerability exists in the username parameter (email field) of PHPgurukul Hospital Management System v4.0, allowing remote attackers to execute arbitrary SQL commands by triggering time delays in the database response. |
|---|
| Quelle | ⚠️ https://github.com/Ant1sec-ops/HMSv4.0-Blind-SQL-Injection/blob/main/exploit-hms-blind-sql.md |
|---|
| Benutzer | Subhash Paudel (UID 66830) |
|---|
| Einreichung | 01.06.2025 18:23 (vor 1 Jahr) |
|---|
| Moderieren | 03.06.2025 22:24 (2 days later) |
|---|
| Status | Duplikat |
|---|
| VulDB Eintrag | 177390 [PHPGurukul Hospital Management System in PHP 4.0 \hms\user-login.php SQL Injection] |
|---|
| Punkte | 0 |
|---|