CVE-2022-38637

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Hospital Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the Username and Password parameters on the Login page.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Sep 13, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-386389.1Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource.CVE-2022-386395.4A cross-site scripting (XSS) vulnerability in Markdown-Nice v1.8.22 allows attackers to execute arbitrary web scripts or HTML via a crafted CVE-2022-38644.5A vulnerability exists in the Relion update package signature validation. A tampered update package could cause the IED to restart. After re CVE-2022-386485.3Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue CVE-2022-386499.8Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Pinot Provider, A CVE-2022-38658.8The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leadi CVE-2022-3865010.0A remote unauthenticated insecure deserialization vulnerability exists in VMware Hyperic Server 5.8.6. Exploitation of this vulnerability en CVE-2022-386519.8A security filter misconfiguration exists in VMware Hyperic Server 5.8.6. Exploitation of this vulnerability enables a malicious party to by CVE-2022-386529.9A remote insecure deserialization vulnerability exixsts in VMWare Hyperic Agent 5.8.6. Exploitation of this vulnerability enables a maliciou CVE-2022-386535.4In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded.CVE-2022-386545.5HCL Domino is susceptible to an information disclosure vulnerability. In some scenarios, local calls made on the server to search the Domin CVE-2022-386555.8BigFix WebUI non-master operators are missing controls that prevent them from being able to modify the relevance of fixlets or to deploy fix