PT-2022-17271 · Unknown · Hospital Management System

Fuzzyap1

·

CVE-2022-25408

·

Published

2022-02-28

·

Updated

2022-03-08

CVSS v3.1

5.4

Medium

VectorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Hospital Management System version 1.0
Description The issue is related to a stored cross-site scripting (XSS) vulnerability. This vulnerability can be exploited via the dpassword parameter at the "/admin-panel1.php" API endpoint.
Recommendations For Hospital Management System version 1.0, consider disabling access to the "/admin-panel1.php" endpoint until a fix is available, and restrict the use of the dpassword parameter to minimize the risk of exploitation.

Exploit

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-25408

Affected Products

Hospital Management System