CVE:CVE-2020-22167
CNNVD:CNNVD-202106-1578
PHPGurukul Hospital Management System是一套基于PHP和MySQL的医院管理系统。
PHPGurukul Hospital Management System 4.0 的hmsadminappointment-history.php中存在跨站脚本漏洞。该漏洞允许远程攻击者利用该漏洞获取用户cookie数据。
solution:Upgrade phpgurukul hospital_management_system_in_php to a higher version than 4.0,and avoid the version 4.0