CVE-2024-46239

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /doctor/edit-profile.php and adminremark parameter in /admin/query-details.php.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a
phpgurukul	hospital_management_system	4.0

References

https://github.com/anoncoder01/PHP_Gurukul_Hospital_Management_System_XSS/blob/master/vulnerabilities/XSS3.mdExploit, Third Party Advisory

Timeline

Published: Oct 21, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-46245.4The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugins for WordPress is vulnerable to S CVE-2024-462404.8Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under action=system and the company/contact parameters und CVE-2024-462415.9PHPGurukul Dairy Farm Shop Management System v1.1 is vulnerable to Cross-Site Scripting (XSS) via the pname parameter in add_product.php and CVE-2024-462427.5An issue in the validate_email function in CTFd/utils/validators/__init__.py of CTFd 3.7.3 allows attackers to cause a Regular expression De CVE-2024-462569.8A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to RCE via Add Let's Encrypt Certi CVE-2024-462576.3A Command injection vulnerability in requestLetsEncryptSslWithDnsChallenge in NginxProxyManager 2.11.3 allows an attacker to achieve remote CVE-2024-462587.8cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_load_png_mem() function at cute_png.h.CVE-2024-462597.8cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_unfilter() function at cute_png.h.CVE-2024-46265.4The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘layout_type’ and 'id' parameters in CVE-2024-462617.8cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_make32() function at cute_png.h.CVE-2024-462637.8cute_png v1.05 was discovered to contain a stack overflow via the cp_dynamic() function at cute_png.h.CVE-2024-462647.8cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_find() function at cute_png.h.