Projectworlds Hospital Management System Php
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Projectworlds Hospital Management System Php.
By the Year
In 2026 there have been 1 vulnerability in Projectworlds Hospital Management System Php with an average score of 7.3 out of ten. Hospital Management System Php did not have any published security vulnerabilities last year. That is, 1 more vulnerability have already been reported in 2026 as compared to last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 7.30 |
| 2025 | 0 | 0.00 |
| 2024 | 0 | 0.00 |
| 2023 | 2 | 9.80 |
| 2022 | 1 | 5.30 |
| 2021 | 4 | 9.55 |
It may take a day or so for new Hospital Management System Php vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Projectworlds Hospital Management System Php Security Vulnerabilities
CVE-2026-8785
CVE-2026-8785
7.3 - High
- May 18, 2026
A flaw has been found in projectworlds hospital-management-system-in-php 1.0. Affected by this vulnerability is the function getAllPatientDetail of the file update_info.php of the component GET Parameter Handler. Executing a manipulation of the argument appointment_no can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
SQL Injection
Hospital Management System: SQLi Auth Bypass (CVE-2023-5053)
CVE-2023-5053
9.8 - Critical
- September 28, 2023
Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI.
SQL Injection
SQLi Auth Bypass in Hospital Management System v378c157
CVE-2023-5004
9.8 - Critical
- September 28, 2023
Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI.
SQL Injection
An issue was discovered in Projectworlds Hospital Management System v1.0
CVE-2021-45852
5.3 - Medium
- March 16, 2022
An issue was discovered in Projectworlds Hospital Management System v1.0. Unauthorized malicious attackers can add patients without restriction via add_patient.php.
Always-Incorrect Control Flow Implementation
Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection
CVE-2021-43631
9.8 - Critical
- December 22, 2021
Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointment_no parameter in payment.php.
SQL Injection
Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in add_patient.php
CVE-2021-43630
8.8 - High
- December 22, 2021
Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in add_patient.php. As a result, an authenticated malicious user can compromise the databases system and in some cases leverage this vulnerability to get remote code execution on the remote web server.
SQL Injection
Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection
CVE-2021-43629
9.8 - Critical
- December 22, 2021
Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in admin_home.php.
SQL Injection
Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection
CVE-2021-43628
9.8 - Critical
- December 22, 2021
Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php.
SQL Injection
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Projectworlds Hospital Management System Php or by Projectworlds? Click the Watch button to subscribe.
