PT-2022-15708 · Sourcecodtester Hospital · Patient Record Management System

Sant268 · Published 2022-01-26 · Updated 2022-02-02 · CVE-2022-22850

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Sourcecodtester Hospital's Patient Records Management System version 1.0

Description A Stored Cross Site Scripting (XSS) issue exists via the description parameter in room types. This allows for potential malicious script execution.

Recommendations For version 1.0, consider restricting access to the room types feature to minimize the risk of exploitation, and avoid using the description parameter in this context until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-22850

Affected Products

Patient Record Management System

References · 5

• 🔥 https://github.com/Sant268/CVE-2022-22850/blob/main/CVE-2022-22850.md · Exploit
• https://osv.dev/vulnerability/CVE-2022-22850 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22850 · Security Note
• https://t.me/cibsecurity/36339 · Telegram Post
• https://sourcecodester.com/php/15116/hospitals-patient-records-management-system-php-free-source-code.html · Note