Security Advisory

CVE-2020-35745

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-01-07 20:29:14
Last updated 2024-08-04 17:09:15
Assigner mitre
State PUBLISHED

Description

PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, doctors, patients, change admin password, get appointment history and access all session logs.