PT-2021-10741 · Unknown · Phpgurukul Hospital Management System

Published 2021-06-22 · Updated 2023-11-14 · CVE-2020-22176

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PHPGurukul Hospital Management System in PHP version 4.0

Description The issue allows remote unauthenticated users to exploit it and obtain user sensitive information due to a sensitive information disclosure vulnerability in multiple areas.

Recommendations For PHPGurukul Hospital Management System in PHP version 4.0, update to a version that includes a fix for this issue, as the current version has a sensitive information disclosure vulnerability.

Exploit

Fix

Improper Authentication

Missing Authorization

Weakness Enumeration

CWE-287

CWE-862

Related Identifiers

CVE-2020-22176

Affected Products

Phpgurukul Hospital Management System

References · 3

• 🔥 https://github.com/itodaro/PHPGurukul_Hospital_Management_System4.0_cve · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-22176 · Security Note
• https://osv.dev/vulnerability/CVE-2020-22176 · Vendor Advisory