CVE-2023-5004

Impact

Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://fluidattacks.com/advisories/alcocer
• https://github.com/projectworldsofficial/hospital-management-system-in-php/
• https://fluidattacks.com/advisories/alcocer
• https://github.com/projectworldsofficial/hospital-management-system-in-php/