A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodtester Hospital's Patient Records Management System 1.0 via the description parameter in room_types.
References
Link | Resource |
---|---|
https://github.com/Sant268/CVE-2022-22850/blob/main/CVE-2022-22850.md | Exploit Third Party Advisory |
https://www.sourcecodester.com/php/15116/hospitals-patient-records-management-system-php-free-source-code.html | Product Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
02 Feb 2022, 19:02
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://github.com/Sant268/CVE-2022-22850/blob/main/CVE-2022-22850.md - Exploit, Third Party Advisory | |
References | (MISC) https://www.sourcecodester.com/php/15116/hospitals-patient-records-management-system-php-free-source-code.html - Product, Third Party Advisory | |
First Time |
Hospital\'s Patient Records Management System Project hospital\'s Patient Records Management System
Hospital\'s Patient Records Management System Project |
|
CWE | CWE-79 | |
CPE | cpe:2.3:a:hospital\'s_patient_records_management_system_project:hospital\'s_patient_records_management_system:1.0:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : 3.5
v3 : 5.4 |
26 Jan 2022, 19:22
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-01-26 19:15
Updated : 2023-12-10 14:09
NVD link : CVE-2022-22850
Mitre link : CVE-2022-22850
CVE.ORG link : CVE-2022-22850
JSON object : View
Products Affected
hospital\'s_patient_records_management_system_project
- hospital\'s_patient_records_management_system
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')