Simple Hospital Management System
Monthly
Stored cross-site scripting in CodeAstro Simple Hospital Management System 1.0 allows authenticated remote attackers to inject JavaScript via First Name, Last name, or Address fields in the doctor.html POST handler. The script executes in a victim's browser when the page is viewed, potentially enabling session hijacking or data theft. Publicly available exploit code exists, but no active exploitation has been confirmed and EPSS estimates very low exploitation probability (0.05%).
Stored cross-site scripting in CodeAstro Simple Hospital Management System 1.0 allows authenticated attackers to inject arbitrary web script via POST parameters at /patient.html. A public exploit is available, but EPSS score of 0.05% and low CVSS severity indicate limited real-world exploitation risk. The flaw can compromise patient data integrity in hospital management deployments.
A vulnerability classified as critical was found in code-projects Simple Hospital Management System 1.0. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.
Stored cross-site scripting in CodeAstro Simple Hospital Management System 1.0 allows authenticated remote attackers to inject JavaScript via First Name, Last name, or Address fields in the doctor.html POST handler. The script executes in a victim's browser when the page is viewed, potentially enabling session hijacking or data theft. Publicly available exploit code exists, but no active exploitation has been confirmed and EPSS estimates very low exploitation probability (0.05%).
Stored cross-site scripting in CodeAstro Simple Hospital Management System 1.0 allows authenticated attackers to inject arbitrary web script via POST parameters at /patient.html. A public exploit is available, but EPSS score of 0.05% and low CVSS severity indicate limited real-world exploitation risk. The flaw can compromise patient data integrity in hospital management deployments.
A vulnerability classified as critical was found in code-projects Simple Hospital Management System 1.0. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.