CVE-2024-10807

A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been rated as problematic. This issue affects some unknown processing of the file hms/doctor/search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Configurations

Configuration 1 (hide)

cpe:2.3:a:anujkumar:hospital_management_system:4.0:*:*:*:*:*:*:*

History

06 Nov 2024, 15:07

Type Values Removed Values Added
References () https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Hospital%20Management%20System%20(HMS)%204.0%20-%20(search.php).md - () https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Hospital%20Management%20System%20(HMS)%204.0%20-%20(search.php).md - Exploit, Third Party Advisory
References () https://phpgurukul.com/ - () https://phpgurukul.com/ - Product
References () https://vuldb.com/?ctiid.283031 - () https://vuldb.com/?ctiid.283031 - Permissions Required
References () https://vuldb.com/?id.283031 - () https://vuldb.com/?id.283031 - Third Party Advisory
References () https://vuldb.com/?submit.436551 - () https://vuldb.com/?submit.436551 - Third Party Advisory
First Time Anujkumar hospital Management System
Anujkumar
CVSS v2 : 3.3
v3 : 2.4
v2 : 3.3
v3 : 4.8
CPE cpe:2.3:a:anujkumar:hospital_management_system:4.0:*:*:*:*:*:*:*

05 Nov 2024, 16:04

Type Values Removed Values Added
Summary
  • (es) Se ha encontrado una vulnerabilidad en PHPGurukul Hospital Management System 4.0. Se ha calificado como problemática. Este problema afecta a algunos procesos desconocidos del archivo hms/doctor/search.php. La manipulación del argumento searchdata conduce a cross site scripting. El ataque puede iniciarse de forma remota. La vulnerabilidad se ha hecho pública y puede utilizarse.

05 Nov 2024, 02:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-11-05 02:15

Updated : 2024-11-06 15:07


NVD link : CVE-2024-10807

Mitre link : CVE-2024-10807

CVE.ORG link : CVE-2024-10807


JSON object : View

Products Affected

anujkumar

  • hospital_management_system
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-707

Improper Neutralization

CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')