CVE-2022-46499: SQL Injection
Published Mar 7, 2024
·Updated
Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the patnumber parameter at hisadminviewsinglepatient.php.
Affected Software
2 affected components
Hospital Management System Hospital Management System
Phpgurukul Hospital Management System=1.0
Event History
Mar 7, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-46499?
CVE-2022-46499 is classified as a high severity SQL injection vulnerability.
2
How do I fix CVE-2022-46499?
To fix CVE-2022-46499, sanitize and validate the pat_number parameter to prevent SQL injection.
3
Which versions of the Hospital Management System are affected by CVE-2022-46499?
Hospital Management System version 1.0 is affected by CVE-2022-46499.
4
What type of vulnerability is CVE-2022-46499?
CVE-2022-46499 is a SQL injection vulnerability that allows attackers to execute arbitrary SQL queries.
5
Where is CVE-2022-46499 located in the application?
CVE-2022-46499 is located in the his_admin_view_single_patient.php file, specifically targeting the pat_number parameter.