Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2022-37151: Online Diagnostic Lab Management System in PHP with Free Source Code

There is an unauthorized access vulnerability in Online Diagnostic Lab Management System 1.0.

CVE
#sql#vulnerability#web#apache#java#php#auth

Submitted by oretnom23 on Wednesday, January 12, 2022 - 09:38.

****Introduction****

This is a simple PHP Mini-Project entitled Online Diagnostic Lab Management System. This is a web-based application that serves as an online platform for diagnostic labs to manage their patient Laboratory test. The system also allows clients/patients to book an appointment. This simple project can help the said medical lab testing manage the records of the appointment and test result records of their patient. The clients/patients can register their system credentials so to book an appointment and explore the updates about his here diagnostic testing. It has a pleasant user interface and user-friendly functionalities.

****About the Online Diagnostic Lab Management System****

I developed this project using the following:

  • XAMPP v3.3.0 as my local webserver that has a PHP Version 8.0.7
  • PHP Language
  • MySQL Database
  • HTML
  • CSS
  • JavaScript
  • jQuery
  • Ajax
  • Bootstrap
  • AdminLTE
  • and more…

This Online Diagnostic Lab Management System has an Admin Panel where the Lab’s management can update the records, upload the patient’s lab testing results. This side of the system requires an admin or staff user credential in order to access the features and functionalities. The patients can register their accounts easily and book a lab testing appointment on their side. They can list all of their appointment records with the diagnostic lab and also they can check the updated status of their results and download their lab test results.

****Features********Admin Panel****

  • Secure Login and Logout
  • Dashboard
    • Display the summary of lists.
  • Test List Management
    • Add New Test
    • List All Tests
    • View Test Details
    • Update Test Details
    • Delete Test Details
  • Appointment Management
    • List All Appointment
    • View Appointment Details
    • List Appointment’s Test Details
    • List Appointment’s Update History Details
    • Update Appointment’s Status
    • Upload test Result/Report
    • Download Prescription
    • Download Test Result
    • Delete Appointment/Test Records
  • Registered User List Management
    • List All Registered User
    • View Registered User Details
    • Delete Registered User Details
  • Manage User List (CRUD)
  • Manage Account Details/Credentials
  • Manage System Information

****User-Side****

  • Secure Login and Registration
  • Appointment Management
    • Booked an Appointment
    • List All Appointment
    • View Appointment Details
    • List Appointment’s Test Details
    • List Appointment’s Update History Details
    • Cancel Booked Appointment
    • Download Prescription
    • Download Test Result
    • Delete Appointment/Test Records
  • List All Test Result
  • Download Test Result
  • Manage Account Details/Credentials
  • Logout

System Snapshots of some Features****Dashboard (User-Side)

Appointment Details (User-Side)

Test Result List Page (User-Side)

Admin Dashboard (Admin-Side)

Booked Appointment List (Admin-Side)

How to Run ??

****Requirements****

  • Download and Install any local web server such as XAMPP/WAMP.
  • Download the provided source code zip file. (download button is located below)

****Installation/Setup****

  1. Enable the GDLibrary in your php.ini file.
  2. Open your XAMPP/WAMP’s Control Panel and start ****Apache**** and ****MySQL****.
  3. Extract the downloaded source code zip file.
  4. If you are using XAMPP, copy the extracted source code folder and paste it into the XAMPP’s “htdocs” directory. And If you are using WAMP, paste it into the “www” directory.
  5. Browse the ****PHPMyAdmin**** in a browser. i.e. ****http://localhost/phpmyadmin****
  6. Create a new database naming ****odlms_db****.
  7. Import the provided ****SQL**** file. The file is known as ****odlms_db.sql**** located inside the database folder.
  8. Browse the Online Diagnostic Lab Management System in a browser. i.e. ****http://localhost/odlms/**** for the user side and ****http://localhost/odlms/admin**** for the admin side.

Default Admin Access

Username: admin
Password: admin123

Sample User Access

Email: [email protected]
Password: cblake123

DEMO VIDEO

That’s it. You can now explore the features and functionalities of this Online Diagnostic Lab Management System in PHP. I hope this project will help you with what you are looking for and you’ll find something useful for your future projects.

Explore more on this website for more Free Source Codes and Tutorials.

Enjoy :)

  • 9264 views

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907