Lucene search

K
cvelistMitreCVELIST:CVE-2020-35745
HistoryJan 07, 2021 - 8:29 p.m.

CVE-2020-35745

2021-01-0720:29:14
mitre
www.cve.org
3
cve-2020-35745
phpgurukul
access restriction
admin dashboard
user data
doctor data
patient data
admin password
appointment history
session logs

AI Score

8.7

Confidence

High

EPSS

0.008

Percentile

82.1%

PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, doctors, patients, change admin password, get appointment history and access all session logs.

AI Score

8.7

Confidence

High

EPSS

0.008

Percentile

82.1%

Related for CVELIST:CVE-2020-35745