CVE-2020-26630: SQL Injection

Published Jan 10, 2024

Updated

A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a special payload in the 'Doctor Specialization' field under the 'Go to Doctors' tab after logging in as an admin.

Affected Software

1 affected component

Phpgurukul Hospital Management System=4.0

Event History

Jan 10, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·09:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2020-26630?

CVE-2020-26630 is considered a high severity vulnerability due to its potential to expose sensitive database information.

How do I fix CVE-2020-26630?

To fix CVE-2020-26630, ensure that Hospital Management System V4.0 is updated to the latest patch that addresses SQL Injection vulnerabilities.

What software is affected by CVE-2020-26630?

CVE-2020-26630 specifically affects PHPGURUKUL Hospital Management System version 4.0.

What type of attack does CVE-2020-26630 facilitate?

CVE-2020-26630 facilitates time-based SQL Injection attacks that can lead to unauthorized database access.

Can CVE-2020-26630 be exploited remotely?

Yes, CVE-2020-26630 can be exploited remotely by authenticated users with access to the 'Doctor Specialization' field.