| 제목 | PHPGurukul Hospital Management System 4.0 SQL Injection |
|---|
| 설명 | A time-based blind SQL injection vulnerability exists in the contactno parameter of Hospital Management System v4.0, allowing remote attackers to execute arbitrary SQL commands by triggering time delays in the database response.
File path: /hospital/hms/doctor/forgot-password.php
|
|---|
| 원천 | ⚠️ https://github.com/Ant1sec-ops/HMS4.0-Avdisories/blob/main/Time-based-blind-sql-on-doctor-forgot-password/Exploit.md |
|---|
| 사용자 | Subhash Paudel (UID 66830) |
|---|
| 제출 | 2025. 06. 08. PM 08:37 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 06. 15. PM 12:44 (7 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 177391 [PHPGurukul Hospital Management System in PHP 4.0 \hms\forgot-password.php SQL 주입] |
|---|
| 포인트들 | 0 |
|---|