Approved changes feed: RSS · Atom

cpe:2.3:a:mayurik:hospital_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorMayurik (727a23cf-b3c3-54bf-b09e-da411a18e16c)
ProductHospital Management System (2e7b3aa2-2447-5dd8-8811-d6a38619e522)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-28320 vulnerable 2026-06-03 14:55:25.422780 Details available
Insecure Direct Object References (IDOR) vulnerability in Hospital Management System 1.0 allows attackers to manipulate user parameters for unauthorized access and modifications via crafted POST request to /patient/edit-user.php.
Published: 2024-04-29T00:00:00.000Z
Updated: 2024-08-02T00:48:49.655Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11102 vulnerable 2026-06-03 14:54:13.421099 SourceCodester Hospital Management System edit-doc.php cross site scripting
LOW (3.5)
A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /vm/doctor/edit-doc.php. The manipulation of the argument name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Published: 2024-11-12T04:00:14.685Z
Updated: 2024-11-12T16:31:26.039Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11073 vulnerable 2026-06-03 14:54:13.365495 SourceCodester Hospital Management System delete-account.php improper authorization
MEDIUM (4.3)
A vulnerability classified as problematic has been found in SourceCodester Hospital Management System 1.0. This affects an unknown part of the file /vm/patient/delete-account.php. The manipulation of the argument id leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-11-11T17:00:11.900Z
Updated: 2024-11-12T20:14:14.993Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.