Hospital Management System v1.0 SQL注入漏洞(CVE-2022-34590)

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-34590
• https://www.cve.org/CVERecord?id=CVE-2022-34590
• https://avd.aliyun.com/detail?id=AVD-2022-34590
• https://cve.imfht.com/detail/CVE-2022-34590
• https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34590.yaml
• https://devhub.checkmarx.com/cve-details/cve-2022-34590/
• https://s4e.io/tools/hospital-management-system-1-0-sql-injection-cve-2022-34590
• https://afaghhosting.net/blog/cve-2022-34590-hospital-management-system-v1-0/

Related Vulnerabilities

• 中成科信票务管理系统 /SystemManager/TicketSystem/ReturnTicketPlance.ashx SQL 注入漏洞
• 中成科信票务管理系统 /SystemManager/Planetarium/ReserveTicketManagerPlane.ashx SQL 注入漏洞
• PoCCVE-2026-3576: Planyo Online Reservation System <= 3.0 - Arbitrary File Read
• PoCCVE-2026-57219: RabbitMQ Management - OAuth 2 Client Secret Disclosure
• 深信服运维安全管理系统 /fort/system/safeCert;help/upload_safe_cert 命令执行漏洞
• PoCzoneminder-system-log: ZoneMinder System Log - Detect
• 用友U8cloud /u8cloud/extsystem/dst SQL 注入漏洞
• 天锐绿盾审批系统 /trwfe/login.jsp/..;/thirdSystemConfig/findSingConfigPage.do SQL 注入漏洞
• 关于U8cloud2.6-5.1sp版本extsystem.dst接口存在SQL注入漏洞的安全公告
• FOSSBilling /system/string_render 命令执行漏洞（CVE-2026-28496）
• Kubernetes Dashboard /api/v1/namespaces/kube-system/secrets/kubernetes-dashboard-certs 权限绕过漏洞（CVE-2018-18264）
• 研華科技｜Hospital Queuing Management - 存在2個漏洞
• FOGProject /fog/management/export.php 信息泄露漏洞（CVE-2025-58443）