CVE-2020-35745

PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users…

published January 7, 2021

CVSS
—
EPSS
2%
Percentile
77.7
In the wild
Unconfirmed
What it is

PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, doctors, patients, change admin password, get appointment history and access all session logs.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01752 · 77.7th percentile
Published
2021-01-07T20:29Z
EPSS history
Timeline
  • 07 JAN 20:29Z
    PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users…
    cvelistv5