CVE-2023-41531

EUVD-2023-46031
Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA-ADPADP
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 7%
Affected Products (NVD)
VendorProductVersion
kishan0725hospital_management_system
4.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://gist.github.com/celbahraoui/f3e2c9d9d015aa455949e3d3c4fdade6
https://github.com/kishan0725/Hospital-Management-System