Approved changes feed: RSS · Atom

cpe:2.3:a:phpgurukul:hospital_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorPhpgurukul (43390843-85b8-5d5e-9218-29dc10c3657d)
ProductHospital Management System (0261ee04-0f79-5c4e-858c-99be45a52a88)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/itodaro/PHPGurukul_Hospital_Management_System4.0_cve purl2cpe 2026-06-01 10:12:14.282032

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1550 vulnerable 2026-06-08 07:49:08.872964 PHPGurukul Hospital Management System Admin Dashboard adminviews.py improper authorization
MEDIUM (6.3)
A security flaw has been discovered in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /hms/hospital/docappsystem/adminviews.py of the component Admin Dashboard Page. Performing a manipulation results in improper authorization. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Published: 2026-01-28T23:02:10.342Z
Updated: 2026-02-23T09:03:01.284Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7176 vulnerable 2026-06-08 07:43:18.094097 PHPGurukul Hospital Management System view-medhistory.php sql injection
HIGH (7.3)
A vulnerability was found in PHPGurukul Hospital Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file view-medhistory.php. The manipulation of the argument viewid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-08T11:32:07.057Z
Updated: 2025-07-08T20:26:04.925Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11675 vulnerable 2026-06-08 06:23:50.187094 CodeAstro Hospital Management System Add Patient Details Page his_admin_register_patient.php cross site scripting
LOW (3.5)
A vulnerability has been found in CodeAstro Hospital Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /backend/admin/his_admin_register_patient.php of the component Add Patient Details Page. The manipulation of the argument pat_fname/pat_ailment/pat_lname/pat_age/pat_dob/pat_number/pat_phone/pat_type/pat_addr leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-11-26T00:00:14.822Z
Updated: 2024-11-26T15:33:47.856Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0364 vulnerable 2026-06-08 06:22:00.455385 PHPGurukul Hospital Management System query-details.php sql injection
MEDIUM (5.5)
A vulnerability, which was classified as critical, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file admin/query-details.php. The manipulation of the argument adminremark leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250131.
Published: 2024-01-10T03:00:05.400Z
Updated: 2025-06-03T14:28:18.184Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0363 vulnerable 2026-06-08 06:22:00.454839 PHPGurukul Hospital Management System patient-search.php sql injection
MEDIUM (5.5)
A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file admin/patient-search.php. The manipulation of the argument searchdata leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-250130 is the identifier assigned to this vulnerability.
Published: 2024-01-10T02:31:03.318Z
Updated: 2025-04-17T15:50:22.777Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0362 vulnerable 2026-06-08 06:22:00.452073 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0361 vulnerable 2026-06-08 06:22:00.451654 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0360 vulnerable 2026-06-08 06:22:00.451202 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0286 vulnerable 2026-06-08 06:22:00.243408 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7173 vulnerable 2026-06-08 06:21:57.191337 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7172 vulnerable 2026-06-08 06:21:57.190728 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46499 vulnerable 2026-06-08 05:50:38.974700 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46498 vulnerable 2026-06-08 05:50:38.973910 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46497 vulnerable 2026-06-08 05:50:38.973334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.