CVE-2023-5004

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Hospital management system version 378c157 allows to bypass authentication.

This is possible because the application is vulnerable to SQLI.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
Hospital-management-system	Hospital-management-system	378c157
projectworlds	hospital_management_system_in_php	2018-06-17

References

https://fluidattacks.com/advisories/alcocerExploit, Third Party Advisory
https://github.com/projectworldsofficial/hospital-management-system-in-php/Product
https://fluidattacks.com/advisories/alcocerExploit, Third Party Advisory
https://github.com/projectworldsofficial/hospital-management-system-in-php/Product

Timeline

Published: Sep 28, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-500449.8Cesanta MJS 2.20.0 has a getprop_builtin_foreign out-of-bounds read if a Built-in API name occurs in a substring of an input string.CVE-2023-50054.8The Autocomplete Location field Contact Form 7 WordPress plugin before 3.0, autocomplete-location-field-contact-form-7-pro WordPress plugin CVE-2023-500537.6An issue in Foundation.app Foundation platform 1.0 allows a remote attacker to obtain sensitive information via the Web3 authentication proc CVE-2023-500595.3An issue ingalxe.com Galxe platform 1.0 allows a remote attacker to obtain sensitive information via the Web3 authentication process of Galx CVE-2023-50066.5The WP Discord Invite WordPress plugin before 2.5.1 does not protect some of its actions against CSRF attacks, allowing an unauthenticated a CVE-2023-500619.8PrestaShop Op'art Easy Redirect >= 1.3.8 and <= 1.3.12 is vulnerable to SQL Injection via Oparteasyredirect::hookActionDispatcher().CVE-2023-500696.1WireMock with GUI versions 3.2.0.0 through 3.0.4.0 are vulnerable to stored cross-site scripting (SXSS) through the recording feature. An at CVE-2023-50078.8Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'id' parameter of the marks.php r CVE-2023-500708.8Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_ticket via d CVE-2023-500718.8Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_department v CVE-2023-500725.4A Stored Cross-Site Scripting (XSS) vulnerability exists in OpenKM version 7.1.40 (dbb6e88) With Professional Extension that allows an authe CVE-2023-500739.8EmpireCMS v7.5 was discovered to contain a SQL injection vulnerability via the ftppassword parameter at SetEnews.php.