First published: Wed May 11 2022(Updated: )
Hospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in room.php.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Hospital Management System Project Hospital Management System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-30449 is a SQL injection vulnerability found in Hospital Management System (HMS) 1.0.
CVE-2022-30449 has a severity rating of critical.
CVE-2022-30449 allows an attacker to perform SQL injections through the editid parameter in room.php.
To fix CVE-2022-30449, update Hospital Management System (HMS) to a version that patches the SQL injection vulnerability.
Yes, you can find more information about CVE-2022-30449 at the following link: [CVE-2022-30449](https://www.yuque.com/docs/share/8d4fd0f4-671f-4ed0-893d-af8227cddf84).