CVE-2022-25402
9.1 criticalEPSS 1.6%
Critical (9.1) in hospital management system project hospital management system. EPSS 1.6% chance of exploitation in the next 30 days.
An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files.
Severity
CVSS 3.1
9.1 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N- EPSS
- 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-11-01)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hospital_management_system_project:hospital_management_system
References
Check your stackJSON