NetSight
high7.5

CVE-2022-25491

HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in appointment.php.

Impact

HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in appointment.php.

Affected products

VendorProductAffected versions
Hospital Management System ProjectHospital Management System
Version 1.0

Weakness classification

References