CVE-2022-24263

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/func.php via the email parameter.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/165882/Hospital-Management-System-4.0-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
https://github.com/kishan0725/Hospital-Management-System/issues/17Exploit, Issue Tracking, Third Party Advisory
https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-24263Exploit, Third Party Advisory
https://github.com/truonghuuphuc/CVEThird Party Advisory
https://www.nu11secur1ty.com/2022/02/cve-2022-24263.htmlExploit, Third Party Advisory
http://packetstormsecurity.com/files/165882/Hospital-Management-System-4.0-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
https://github.com/kishan0725/Hospital-Management-System/issues/17Exploit, Issue Tracking, Third Party Advisory
https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-24263Exploit, Third Party Advisory
https://github.com/truonghuuphuc/CVEThird Party Advisory
https://www.nu11secur1ty.com/2022/02/cve-2022-24263.htmlExploit, Third Party Advisory

Timeline

Published: Jan 31, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-242647.5Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/table_manager/ via the search_word param CVE-2022-242657.5Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/menu/ via the path=component/menu/&menu_CVE-2022-242667.5Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/table_manager/ via the order_by paramete CVE-2022-242726.5An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This CVE-2022-242789.8The package convert-svg-core before 0.6.4 are vulnerable to Directory Traversal due to improper sanitization of SVG tags. Exploiting this vu CVE-2022-242797.5The package madlib-object-utils before 0.1.8 are vulnerable to Prototype Pollution via the setValue method, as it allows an attacker to merg CVE-2022-24287.3A crafted tag in the Jupyter Notebook viewer in GitLab EE/CE affecting all versions before 15.1.6, 15.2 to 15.2.4, and 15.3 to 15.3.2 allows CVE-2022-242806.5Improper Input Validation vulnerability in Proxy component of Apache Pulsar allows an attacker to make TCP/IP connection attempts that origi CVE-2022-242817.2A vulnerability has been identified in SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). A privileged authenticated attac CVE-2022-242827.2A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All CVE-2022-242857.8Acer Care Center 4.00.30xx before 4.00.3042 contains a local privilege escalation vulnerability. The user process communicates with a servic CVE-2022-242867.8Acer QuickAccess 2.01.300x before 2.01.3030 and 3.00.30xx before 3.00.3038 contains a local privilege escalation vulnerability. The user pro