Skip to content

VULNERABLE: SQL Injection in Hospital-Management-System. SQL injection in Hospital-Management-System/patientsearch.php via the 'patient_contact' param #19

Open
@namnhat239

Description

I found an SQL Injection in your project
Pls Follow these steps to reproduce:

  1. Create a request to 'patientsearch.php':
    Screenshot 2022-02-11 105352
  2. Save this request to 1.txt file:
    image
  3. Run SQLMap for the attack:
    sqlmap -r 1.txt --dbs
    image
  4. Area of concern in patientsearch.php
    image

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions