PT-2022-25231 · Unknown · Hospital Management Center

Ace · Published 2022-11-16 · Updated 2022-11-17 · CVE-2022-4013

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Hospital Management Center (affected versions not specified)

Description A problematic vulnerability was found in Hospital Management Center, affecting an unknown functionality of the file appointment.php. This vulnerability leads to cross-site request forgery and can be launched remotely. The exploit has been disclosed to the public and may be used.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Authorization

CSRF

Weakness Enumeration

CWE-863

CWE-352

Related Identifiers

CVE-2022-4013

Affected Products

Hospital Management Center

References · 5

• 🔥❌ https://github.com/golamsarwar08/hms/issues/2 · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2022-4013 · Security Note
• https://t.me/cvenotify/37864 · Telegram Post
• https://t.me/cibsecurity/53038 · Telegram Post
• https://vuldb.com/?id.213787 · Note