.. / CVE-2020-5192

Exploit for Hospital Management System 4.0 - SQL Injection (CVE-2020-5192)

Description:

Hospital Management System 4.0 contains multiple SQL injection vulnerabilities because multiple pages and parameters do not validate user input. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site.

Nuclei Template

View the template here CVE-2020-5192.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-5192.yaml
Copy

References:

https://github.com/ARPSyndicate/cvemon
https://nvd.nist.gov/vuln/detail/CVE-2020-5192
https://github.com/ARPSyndicate/kenzer-templates
https://phpgurukul.com/hospital-management-system-in-php/
https://www.exploit-db.com/exploits/47840