4 matches found
CVE-2025-2870: Improper Neutralization of Input During Web Page Generation
Reflected Cross-Site Scripting XSS vulnerability in version 1.0 of the Clinic Queuing System. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the page parameter in /patientside.php...
CVE-2024-6273
SourceCodester Clinic Queuing System 1.0 is affected. The vulnerability is in the function save_patient of patient_side.php, where manipulating Full Name/Contact/Address leads to cross-site scripting. The issue can be exploited remotely and the exploit has been publicly disclosed. No patch detail...
CVE-2024-6273 SourceCodester Clinic Queuing System patient_side.php save_patient cross site scripting
A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been declared as problematic. Affected by this vulnerability is the function savepatient of the file patientside.php. The manipulation of the argument Full Name/Contact/Address leads to cross site scripting. The attack...
CVE-2024-6273: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been declared as problematic. Affected by this vulnerability is the function savepatient of the file patientside.php. The manipulation of the argument Full Name/Contact/Address leads to cross site scripting. The attack...