CVE-2022-46499 - Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_number parameter at his_admin_view_single_patient.php

Back Back to CVE browser

HIGH

Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_number parameter at his_admin_view_single_patient.php

Published Mar 7, 2024

8.8

HIGH

CVSS 3.1

EPSS 0.55%

Description

Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_number parameter at his_admin_view_single_patient.php.

Affected products

Vendor Codeastro Product Hospital Management System Default
unknown
Affected
- 1.0

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Codeastro	Hospital Management System	unknown	Affected 1.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-49303
Advisory
https://github.com/ASR511-OO7/CVE-2022-46499/blob/main/CVE-31
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-49303		Advisory
https://github.com/ASR511-OO7/CVE-2022-46499/blob/main/CVE-31		Third Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 7, 2024

Updated Aug 14, 2024

Reserved Dec 5, 2022

Link CVE-2022-46499

CISA Vulnrichment

Updated Aug 14, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2022-46499

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Mar 7, 2024

Updated Aug 14, 2024

Link EUVD-2022-49303

GitHub

No data