PT-2025-28273 · Codeastro · Codeastro Hospital Management System
Subhash Paudel
·
Publicado
2025-07-08
·
Atualizado
2025-07-22
·
CVE-2025-7153
CVSS v3.1
5.4
Média
| Vetor | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions:
CodeAstro Simple Hospital Management System version 1.0
Description:
A problematic issue was found in the CodeAstro Simple Hospital Management System, affecting an unknown functionality of the file /doctor.html, specifically the POST Parameter Handler component. The manipulation of the
First Name, Last Name, or Address arguments leads to cross-site scripting. This issue can be exploited remotely.Recommendations:
For CodeAstro Simple Hospital Management System version 1.0, as a temporary workaround, consider restricting access to the /doctor.html file until a patch is available. Avoid using the
First Name, Last Name, or Address parameters in the affected POST Parameter Handler component until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Code Injection
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Codeastro Hospital Management System