| Название | PHPGurukul Hospital Management System 4.0 SQL Injection |
|---|
| Описание | A time-based blind SQL injection vulnerability exists in the contactno parameter of Hospital Management System v4.0, allowing remote attackers to execute arbitrary SQL commands by triggering time delays in the database response.
File path: /hospital/hms/doctor/forgot-password.php
|
|---|
| Источник | ⚠️ https://github.com/Ant1sec-ops/HMS4.0-Avdisories/blob/main/Time-based-blind-sql-on-doctor-forgot-password/Exploit.md |
|---|
| Пользователь | Subhash Paudel (UID 66830) |
|---|
| Представление | 08.06.2025 20:37 (1 Год назад) |
|---|
| Модерация | 15.06.2025 12:44 (7 days later) |
|---|
| Статус | Дубликат |
|---|
| Запись VulDB | 177391 [PHPGurukul Hospital Management System in PHP 4.0 \hms\forgot-password.php SQL-инъекция] |
|---|
| Баллы | 0 |
|---|