CVE-2021-43630: SQL Injection
Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in addpatient.php. As a result, an authenticated malicious user can compromise the databases system and in some cases leverage this vulnerability to get remote code execution on the remote web server.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-43630?
The severity of CVE-2021-43630 is high with a severity value of 8.8.
How does CVE-2021-43630 affect Projectworlds Hospital Management System v1.0?
CVE-2021-43630 affects Projectworlds Hospital Management System v1.0 by allowing SQL injection via multiple parameters in add_patient.php.
How can an authenticated malicious user exploit CVE-2021-43630?
An authenticated malicious user can exploit CVE-2021-43630 to compromise the database system and potentially achieve remote code execution on the remote web server.
How can I fix CVE-2021-43630 in Projectworlds Hospital Management System v1.0?
To fix CVE-2021-43630 in Projectworlds Hospital Management System v1.0, the SQL injection vulnerability in add_patient.php should be patched by implementing proper input validation and parameterized queries across the application.
Where can I find more information about CVE-2021-43630?
More information about CVE-2021-43630 can be found at the following references: [GitHub Issue](https://github.com/projectworldsofficial/hospital-management-system-in-php/issues/4) and [Projectworlds](https://projectworlds.in/free-projects/php-projects/hospital-management-system-in-php/).