Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2022-40471: Clinic's Patient Management System in PHP/PDO Free Source Code

Remote Code Execution in Clinic’s Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload functionality in users.php

CVE
#sql#web#apache#java#php#rce#pdf

Submitted by oretnom23 on Thursday, June 30, 2022 - 13:09.

****Introduction****

This simple project is a Clinic Patient Management System. This is a web-based application project developed in PHP and MySQL Database. This project’s main purpose is to provide an online and automated platform for managing data for certain Medical clinics. This system helps the clinic to easily store, retrieve, and manage their patients visiting and prescription records. It has a pleasant user interface with the help of the Bootstrap Framework and AdminLTE Template that provides a better experience to the end-users. It also consists of multiple user-friendly features and functionalities.

****About the Clinic Patient Management System****

The project was developed with the following:

  • XAMPP v3.3.0
  • PHP
  • MySQL Database
  • HTML
  • CSS
  • JavaScript
  • Ajax
  • jQuery
  • Bootstrap
  • Font Awesome
  • AdminLTE

This Clinic Patient Management System is only accessible to the clinic’s management. It requires the system users to log in with their valid credentials in order to gain access to the features and functionalities of the system. System users can manage the list of Medicines, Medicine Details, Patients, and Patient Prescriptions. Here the management can store the patients’ visit information with some relevant data such as the blood pressure, weight, disease, and more. The management can create a prescription for the patient for its specific illness or based on her diagnosis. Using the system, the clinic’s management can easily retrieve the patient history with the clinic. It also generates a printable and downloadable PDF Report for Patients Visits Records and Diseases Records.

****Features****

  • Dashboard Page
    • Display the summary.
  • Medicine Management
    • Add New Medicine
    • List All Medicines
    • Edit/Update Medicine Details
  • Medicine Details Management
    • Add New Medicine Details
    • List All Medicine Details
    • Edit/Update Medicine Details Details
  • Patient Management
    • Add New Patient
    • List All Patients
    • Edit/Update Patient Details
    • Add New Patient’s Prescription
    • Patient’s History List
  • Report
    • Generating Printable and Downloadable Reports
      • Patient Visits
      • Disease Records
  • User Management
    • Add New User
    • List All Users
    • Edit User Details
  • Login and Logout

The source code was developed only for educational purposes only. You can download the source code for free and modify it the way you wanted.

**System Snapshots of some Features******Login****

****Dashboard****

****Medicine Details List Page****

****Patient List Page****

****Patient Visits Report****

****Disease Record Report****

How to Run ??

****Requirements****

  • Download and Install any local web server such as XAMPP.
  • Download the provided source code zip file. (download button is located below)

****System Installation/Setup****

  1. Open your XAMPP Control Panel and start ****Apache**** and ****MySQL****.
  2. Extract the downloaded source code zip file.
  3. Copy the extracted source code folder and paste it into the XAMPP’s “htdocs” directory.
  4. Browse the ****PHPMyAdmin**** in a browser. i.e. ****http://localhost/phpmyadmin****
  5. Create a new database naming ****pms_db****.
  6. Import the provided ****SQL**** file. The file is known as ****pms_db.sql**** located inside the database folder.
  7. Browse the Clinic Patient Management System in a browser. i.e. ****http://localhost/pms/****.

****Admin Default Access:****

Username: admin
Password: admin123

****DEMO VIDEO****

That’s it. You can now explore the features and functionalities of this Clinic Patient Management System in PHP. I hope this will help you with what you are looking for and you’ll find something useful for your future projects.

Explore more on this website for more Free Source Codes and Tutorials.

Enjoy :)

  • 6445 views

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907