PT-2021-22286 · Unknown · Hospital Management System

Dumpling-Soup · Published 2021-08-16 · Updated 2021-08-23 · CVE-2021-38757

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Hospital Management System (affected versions not specified)

Description The issue is related to a persistent cross-site scripting (XSS) in the Hospital Management System, specifically targeting web admin through the contact.php file. This allows for malicious scripts to be injected and executed, potentially leading to unauthorized access or data manipulation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-38757

Affected Products

Hospital Management System

References · 6

• 🔥 https://github.com/kishan0725/Hospital-Management-System/issues/6 · Exploit
• 🔥 http://packetstormsecurity.com/files/163869/Hospital-Management-System-Cross-Site-Scripting.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-38757 · Security Note
• https://t.me/cvenotify/19423 · Telegram Post
• https://t.me/cvenotify/19441 · Telegram Post
• https://t.me/cibsecurity/27382 · Telegram Post