cve.bz

CVE-2022-25402

9.1 criticalEPSS 1.6%

Critical (9.1) in hospital management system project hospital management system. EPSS 1.6% chance of exploitation in the next 30 days.

An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files.

Severity

CVSS 3.1

9.1 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS
1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-11-01)
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON