Design/Logic Flaw

2022-08-2621:15:00

PRIOn knowledge base

www.prio-n.com

access control

edoc-doctor-appointment-system

logic flaw

administrator data

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.0%

JSON

An access control issue in the component /ip/admin/ of Edoc-doctor-appointment-system v1.0.1 allows attackers to arbitrarily edit, read, and delete Administrator data.

CPENameOperatorVersion
edoc-doctor-appointment-systemeq1.0.1

CPE	Name	Operator	Version
	edoc-doctor-appointment-system	eq	1.0.1

References

github.com/HashenUdara/edoc-doctor-appointment-system

github.com/onEpAth936/cve/blob/master/bug_e/edoc-doctor-appointment-system