Authentication flaw

2023-09-2821:15:00

PRIOn knowledge base

www.prio-n.com

hospital management

authentication flaw

sql injection

9.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.5%

Hospital management system version 378c157 allows to bypass authentication.

This is possible because the application is vulnerable to SQLI.

CPENameOperatorVersion
hospital_management_system_in_phpeq2018617.0.0

CPE	Name	Operator	Version
	hospital_management_system_in_php	eq	2018617.0.0

References

fluidattacks.com/advisories/alcocer

github.com/projectworldsofficial/hospital-management-system-in-php/