CVE-2022-36242

Impact

Clinic's Patient Management System v1.0 is vulnerable to SQL Injection via /pms/update_medicine.php?id=.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/MouZhou/bug_report/blob/main/vendors/oretnom23/clinics-patient-management-system/SQLi-1.md
• https://github.com/MouZhou/bug_report/blob/main/vendors/oretnom23/clinics-patient-management-system/SQLi-1.md