Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:hospital_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductHospital Management System (01fde3c9-8190-59cb-85e3-634ed962e832)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-11102 vulnerable 2026-06-08 06:23:48.749576 SourceCodester Hospital Management System edit-doc.php cross site scripting
LOW (3.5)
A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /vm/doctor/edit-doc.php. The manipulation of the argument name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Published: 2024-11-12T04:00:14.685Z
Updated: 2024-11-12T16:31:26.039Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11073 vulnerable 2026-06-08 06:23:48.682105 SourceCodester Hospital Management System delete-account.php improper authorization
MEDIUM (4.3)
A vulnerability classified as problematic has been found in SourceCodester Hospital Management System 1.0. This affects an unknown part of the file /vm/patient/delete-account.php. The manipulation of the argument id leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-11-11T17:00:11.900Z
Updated: 2024-11-12T20:14:14.993Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4176 vulnerable 2026-06-08 06:16:11.710289 SourceCodester Hospital Management System appointmentapproval.php sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been classified as critical. This affects an unknown part of the file appointmentapproval.php. The manipulation of the argument time leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-236211.
Published: 2023-08-06T02:00:04.810Z
Updated: 2024-08-02T07:17:12.009Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.