Detections
Analytics

CVE-2022-30012

high

Description

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection.

References

https://github.com/kabirkhyrul/HMS/tree/1.0

https://github.com/kabirkhyrul/HMS/discussions/15

Details

Source: Mitre, NVD

Published: 2022-05-16

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Severity: High

EPSS

EPSS: 0.00078