Hospital Management System
CVE-2017-14846
HIGH
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionCVE.org
Mojoomla Hospital Management System for WordPress allows SQL Injection via the id parameter.
AnalysisAI
Mojoomla Hospital Management System for WordPress allows SQL Injection via the id parameter. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Technical ContextAI
This vulnerability is classified as SQL Injection (CWE-89), which allows attackers to execute arbitrary SQL commands against the database. Mojoomla Hospital Management System for WordPress allows SQL Injection via the id parameter. Affected products include: Dasinfomedia Hospital Management System.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use parameterized queries/prepared statements. Never concatenate user input into SQL. Apply least-privilege database permissions.
More in Hospital Management System
View allAn arbitrary file upload vulnerability in the component /jquery-file-upload/server/php/index.php of Hospital Management
A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows
SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to execute ar
A vulnerability was found in SourceCodester Hospital Management System 1.0. Rated critical severity (CVSS 9.8), this vul
A vulnerability was found in Hospital Management System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is r
A vulnerability was found in Hospital Management System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is r
A vulnerability was found in Hospital Management System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is r
A privilege escalation issue was found in PHP Gurukul Hospital Management System In v.4.0 allows a remote attacker to ex
Hospital Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the Username and Pa
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at orde
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doc
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at adm
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today