| शीर्षक | PHPGurukul Hospital Management System 4.0 Cross Site Scripting |
|---|
| विवरण | A time-based blind and Union SQL injection vulnerability exists in the searchdata parameter of Hospital Management System v4.0, allowing remote attackers to execute arbitrary SQL commands by triggering with union and time delays in the database response. |
|---|
| स्रोत | ⚠️ https://github.com/Ant1sec-ops/HMS4.0-Avdisories/blob/main/Union-based-sqli-on-doctor-search/exploit.md |
|---|
| उपयोगकर्ता | Subhash Paudel (UID 66830) |
|---|
| सबमिशन | 20/06/2025 09:04 PM (1 वर्ष पहले) |
|---|
| संयम | 24/06/2025 10:14 AM (4 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 313742 [PHPGurukul Hospital Management System 4.0 /doctor/search.php searchdata SQL इंजेक्शन] |
|---|
| अंक | 17 |
|---|