CVE-2020-25271 - PHPGurukul hospital-management-system-in-php 4.0 allows XSS via admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, or admin/appointment-history.php

Back Back to CVE browser

MEDIUM

PHPGurukul hospital-management-system-in-php 4.0 allows XSS via admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, or admin/appointment-history.php

Published Oct 8, 2020

5.4

MEDIUM

CVSS 3.1

EPSS 0.62%

Description

PHPGurukul hospital-management-system-in-php 4.0 allows XSS via admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, or admin/appointment-history.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-17959
Advisory
https://github.com/Ko-kn3t/CVE-2020-25271
x_refsource_MISCExploitThird Party Advisory
https://phpgurukul.com
x_refsource_MISCProduct

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-17959		Advisory
https://github.com/Ko-kn3t/CVE-2020-25271		x_refsource_MISCExploitThird Party Advisory
https://phpgurukul.com		x_refsource_MISCProduct