vendor:
PHIMS - Hospital Management Information System
by:
Borna nematzadeh
5.5
CVSS
MEDIUM
SQL Injection
89
CWE
Product Name: PHIMS - Hospital Management Information System
Affected Version From: All versions
Affected Version To: All versions
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested: Web
2018
PHIMS – Hospital Management Information System – ‘Password’ SQL Injection
The vulnerability allows an attacker to inject sql commands.
Mitigation:
Implement proper input validation and parameterized queries to prevent SQL injection attacks.
