PT-2020-18294 · Phpgurukul · Phpgurukul Hospital Management System

Published 2020-01-14 · Updated 2023-11-14 · CVE-2020-5193

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHPGurukul Hospital Management System in PHP version 4.0

Description The issue concerns multiple reflected XSS vulnerabilities. These can be triggered via the searchdata or Doctorspecialization parameter.

Recommendations For PHPGurukul Hospital Management System in PHP version 4.0, consider restricting the use of the searchdata and Doctorspecialization parameters until a fix is available. Avoid using these parameters in sensitive operations to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-5193

Affected Products

Phpgurukul Hospital Management System

References · 3

• 🔥 http://packetstormsecurity.com/files/155929/Hospital-Management-System-4.0-Cross-Site-Scripting.html · Exploit
• https://osv.dev/vulnerability/CVE-2020-5193 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5193 · Security Note