Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2022-32094

EPSS 26.81% · P96
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2022-32094

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doctorlogin.php.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Hospital Management System SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Hospital Management System(HMS)是一种计算机系统,可以帮助管理与医疗保健相关的信息,并帮助医疗保健提供者有效地完成工作。 Hospital Management System v1.0 版本存在安全漏洞,该漏洞源于 doctorlogin.php 页面的 loginid 参数存在 SQL 注入问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2022-32094

#POC DescriptionSource LinkShenlong Link
1Hospital Management System 1.0 contains a SQL injection vulnerability via the editid parameter in /HMS/doctor.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32094.yamlPOC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-32094

登录查看更多情报信息。

Same Patch Batch · n/a · 2022-07-01 · 54 CVEs total

CVE-2022-259008.1 HIGHCommand Injection
CVE-2022-258987.7 HIGHImproper Verification of Cryptographic Signature
CVE-2022-258766.2 MEDIUMServer-side Request Forgery (SSRF)
CVE-2022-257585.3 MEDIUMRegular Expression Denial of Service (ReDoS)
CVE-2022-258964.8 MEDIUMSession Fixation
CVE-2022-32087MariaDB 安全漏洞
CVE-2022-32095Hospital Management System SQL注入漏洞
CVE-2022-32324PDFAlto 缓冲区错误漏洞
CVE-2022-34903GnuPG 注入漏洞
CVE-2022-32411HongCMS 安全漏洞
CVE-2022-32035Tenda M3 缓冲区错误漏洞
CVE-2022-32086MariaDB 安全漏洞
CVE-2022-32085MariaDB 安全漏洞
CVE-2022-32083MariaDB 安全漏洞
CVE-2022-32030Tenda AX1806 缓冲区错误漏洞
CVE-2022-32031Tenda AX1806 缓冲区错误漏洞
CVE-2022-32032Tenda AX1806 缓冲区错误漏洞
CVE-2022-32033Tenda AX1806 缓冲区错误漏洞
CVE-2022-32034Tenda M3 缓冲区错误漏洞
CVE-2022-32037Tenda M3 缓冲区错误漏洞

Showing top 20 of 54 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2022-32094

No comments yet


Leave a comment