Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

Hospital Management System — Vulnerabilities & Security Advisories 60

All 60 CVE vulnerabilities found in Hospital Management System, with AI-generated Chinese analysis, references, and POCs.

This page is a vulnerability aggregation resource for the Hospital Management System, focusing on common weakness enumeration tags and known security defects. It collects data on critical security flaws affecting this specific healthcare software infrastructure, covering reports and advisories released from 2018 through early 2024. Here, security professionals can track vendor advisories to stay informed about emerging threats, understand the characteristics and impact of specific weakness classes within the medical domain, and look up a product's vulnerability history to assess long-term risk exposure. The aggregated content highlights how design flaws, improper input handling, and misconfigured access controls can compromise patient data integrity and system availability. By consolidating these findings, the resource aims to provide a comprehensive view of the threat landscape for hospital management platforms. Readers can analyze trends in reported issues to identify persistent security gaps or newly discovered attack vectors. This information supports both proactive mitigation strategies and reactive incident response efforts. The data serves as a vital reference for IT administrators, compliance officers, and security analysts responsible for maintaining the safety and reliability of healthcare information systems. Understanding these vulnerabilities is essential for ensuring regulatory compliance and protecting sensitive health records from unauthorized access or exploitation.

Vendor: n/a

CVE IDTitleCVSSSeverityPublished
CVE-2024-11678 CodeAstro Hospital Management System his_doc_register_patient.php cross site scripting CWE-79 3.5 Low2024-11-26
CVE-2024-11677 CodeAstro Hospital Management System Add Vendor Details Page his_admin_add_vendor.php cross site scripting CWE-79 3.5 Low2024-11-26
CVE-2024-11676 CodeAstro Hospital Management System Add Laboratory Equipment Page his_admin_add_lab_equipment.php cross site scripting CWE-79 3.5 Low2024-11-26
CVE-2024-11675 CodeAstro Hospital Management System Add Patient Details Page his_admin_register_patient.php cross site scripting CWE-79 3.5 Low2024-11-26
CVE-2024-11674 CodeAstro Hospital Management System his_doc_update-account.php unrestricted upload CWE-434 6.3 Medium2024-11-25
CVE-2024-11102 SourceCodester Hospital Management System edit-doc.php cross site scripting CWE-79 3.5 Low2024-11-12
CVE-2024-11073 SourceCodester Hospital Management System delete-account.php improper authorization CWE-285 4.3 Medium2024-11-11
CVE-2024-10807 PHPGurukul Hospital Management System search.php cross site scripting CWE-79 2.4 Low2024-11-05
CVE-2024-10806 PHPGurukul Hospital Management System betweendates-detailsreports.php cross site scripting CWE-79 2.4 Low2024-11-05
CVE-2024-10350 code-projects Hospital Management System add-doctor.php sql injection CWE-89 4.7 Medium2024-10-24
CVE-2024-10170 code-projects Hospital Management System get_doctor.php sql injection CWE-89 6.3 Medium2024-10-20
CVE-2024-10169 code-projects Hospital Management System change-password.php sql injection CWE-89 6.3 Medium2024-10-20
CVE-2024-8944 code-projects Hospital Management System check_availability.php sql injection CWE-89 7.3 High2024-09-17
CVE-2024-8569 code-projects Hospital Management System user-login.php sql injection CWE-89 7.3 High2024-09-08
CVE-2024-8368 code-projects Hospital Management System Login index.php sql injection CWE-89 7.3 High2024-09-01
CVE-2024-0364 PHPGurukul Hospital Management System query-details.php sql injection CWE-89 5.5 Medium2024-01-10
CVE-2024-0363 PHPGurukul Hospital Management System patient-search.php sql injection CWE-89 5.5 Medium2024-01-10
CVE-2024-0362 PHPGurukul Hospital Management System change-password.php sql injection CWE-89 5.5 Medium2024-01-10
CVE-2024-0361 PHPGurukul Hospital Management System contact.php sql injection CWE-89 5.5 Medium2024-01-10
CVE-2024-0360 PHPGurukul Hospital Management System edit-doctor-specialization.php sql injection CWE-89 5.5 Medium2024-01-10
CVE-2024-0286 PHPGurukul Hospital Management System Contact Form index.php#contact_us cross site scripting CWE-79 4.3 Medium2024-01-07
CVE-2024-0268 Kashipara Hospital Management System registration.php sql injection CWE-89 7.3 High2024-01-07
CVE-2024-0267 Kashipara Hospital Management System Parameter login.php sql injection CWE-89 7.3 High2024-01-07
CVE-2023-7173 PHPGurukul Hospital Management System registration.php cross site scripting CWE-79 4.3 Medium2023-12-30
CVE-2023-7172 PHPGurukul Hospital Management System Admin Dashboard sql injection CWE-89 7.3 High2023-12-30
CVE-2023-4176 SourceCodester Hospital Management System appointmentapproval.php sql injection CWE-89 6.3 Medium2023-08-06
CVE-2023-3811 Hospital Management System patientprofile.php sql injection CWE-89 6.3 Medium2023-07-21
CVE-2023-3810 Hospital Management System patientappointment.php sql injection CWE-89 6.3 Medium2023-07-21
CVE-2023-3809 Hospital Management System patient.php sql injection CWE-89 6.3 Medium2023-07-21
CVE-2023-3808 Hospital Management System patientforgotpassword.php sql injection CWE-89 6.3 Medium2023-07-21

All 60 known CVE vulnerabilities affecting Hospital Management System with full Chinese analysis, references, and POCs where available.