← All advisories

Critical severity9.1NVD Advisory· Published Feb 24, 2022· Updated Jun 17, 2026

CVE-2022-25402

CVE-2022-25402

Description

An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files.

Affected products

3

Hospital Management System Project/Hospital Management System
cpe:2.3:a:hospital_management_system_project:hospital_management_system:1.0:*:*:*:*:*:*:*
HMS/HMSdescription
Hms/hmsllm-fuzzy
Range: 1.0

Patches

Vulnerability mechanics

References

1

github.com/dota-st/Vulnerability/blob/master/HMS/HMS.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.