| Название | PHPGurukul Hospital Management System 4.0 Cross Site Scripting |
|---|
| Описание | A time-based blind and Union SQL injection vulnerability exists in the searchdata parameter of Hospital Management System v4.0, allowing remote attackers to execute arbitrary SQL commands by triggering with union and time delays in the database response. |
|---|
| Источник | ⚠️ https://github.com/Ant1sec-ops/HMS4.0-Avdisories/blob/main/Union-based-sqli-on-doctor-search/exploit.md |
|---|
| Пользователь | Subhash Paudel (UID 66830) |
|---|
| Представление | 20.06.2025 21:04 (1 Год назад) |
|---|
| Модерация | 24.06.2025 10:14 (4 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 313742 [PHPGurukul Hospital Management System 4.0 /doctor/search.php searchdata SQL-инъекция] |
|---|
| Баллы | 17 |
|---|