Beveiligingsadvies

CVE-2020-35745

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-01-07 20:29:14
Laatst bijgewerkt 2024-08-04 17:09:15
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, doctors, patients, change admin password, get appointment history and access all session logs.