CVE-2022-33880

hms-staff.php in Projectworlds Hospital Management System Mini-Project through 2018-06-17 allows SQL injection via the type parameter.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-09-29

Last modified

2025-05-20

Weaknesses

CWE-89

Affected products

• Hospital Management System Mini-project (Hospital Management System Mini-project Project)

References

• https://github.com/projectworldsofficial/hospital-management-system-in-php/issues/7