| 标题 | PHPGurukul Hospital Management System 4.0 Cross Site Scripting |
|---|
| 描述 | A time-based blind and Union SQL injection vulnerability exists in the searchdata parameter of Hospital Management System v4.0, allowing remote attackers to execute arbitrary SQL commands by triggering with union and time delays in the database response. |
|---|
| 来源 | ⚠️ https://github.com/Ant1sec-ops/HMS4.0-Avdisories/blob/main/Union-based-sqli-on-doctor-search/exploit.md |
|---|
| 用户 | Subhash Paudel (UID 66830) |
|---|
| 提交 | 2025-06-20 21時04分 (1 年前) |
|---|
| 管理 | 2025-06-24 10時14分 (4 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 313742 [PHPGurukul Hospital Management System 4.0 /doctor/search.php searchdata SQL注入] |
|---|
| 积分 | 17 |
|---|