Dheeraj Deshmukh

2 exploits Active since Feb 2022

CVE-2022-22853 WRITEUP MEDIUM WORKING POC

Hospital's Patient Records Management System - XSS

A stored cross-site scripting (XSS) vulnerability in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Name field.

CVSS 5.4

View Code

CVE-2022-22854 WRITEUP HIGH WRITEUP

Hospital's Patient Records Management System - Missing Authorization

An access control issue in hprms/admin/?page=user/list of Hospital Patient Record Management System v1.0 allows attackers to escalate privileges via accessing and editing the user list.

CVSS 8.8

View Code