2236 matches found
CVE-2021-25791-Multiple-Stored-XSS
CVE-2021-25791-Multiple-Stored-XSS : Множественные хранимые XSS в системе онлайн-записи к врачу В системе онлайн-записи к врачу версии 1.0 существует множество хранимых аутентифицированных межсайтовых сценариев XSS. Ссылка на ПО:...
CVE-2025-46181-XSS
CVE-2025-46181 - ثغرة XSS المنعكسة في نظام حجز المواعيد عبر الإنترنت معرّف CVE : CVE-2025-46181 اكتشفها : Shemkumar P shemkumar.github.io نوع الثغرة : البرمجة النصية عبر المواقع المنعكسة Reflected XSS الخطورة : متوسطة الحالة : مُفصح عنها، تم تخصيص CVE من قبل MITRE ✨ الوصف توجد ثغرة البرمجة النصية...
instant-appointment-arbitrary-file-upload
instant-appointment-arbitrary-file-upload instant-appointment - Caricamento arbitrario di file Descrizione Il plugin Instant Appointment per WordPress è vulnerabile al caricamento arbitrario di file nelle versioni fino alla 1.2 inclusa. Ciò consente ad attaccanti non autenticati di caricare una...
exploits
exploits Veröffentlichte PoCs finden Sie unter exploitdb.com Patient Appointment Scheduler System v1.0: Inbit Messenger v4.6.0:...
CVE-2025-7753
🚨 CVE-2025-7753 — Exploit PoC di SQL Injection Autore: Byte Reaper Telegram: @ByteReaper0 CVE: CVE‑2025‑7753 Vulnerabilità: SQL Injection non autenticata, basata sul tempo 🔍 Panoramica Una vulnerabilità critica di SQL Injection esiste in Online Appointment Booking System 1.0 Code‑Projects nel fil...
CVE-2023-23397
CVE-2023-23397 CVE-2023-23397 C PoC 1- Laden Sie das msgkit herunter 2- Bearbeiten Sie die Appointment-Klasse und fügen Sie Folgendes hinzu: 3- Erstellen Sie eine neue Klasse im Projekt, um die Eigenschaften der msg-Datei festzulegen: root@kitploit: using MsgKit.Enums; using System; using...
CVE-2023-23397-POC
CVE-2023-23397-POC Exploit-POC für CVE-2023-23397 Appointment.cs: die modifizierte Datei von https://github.com/Sicos1977/MsgKit/blob/master/MsgKit/Appointment.cs Exploit.cs: der Code, den ich verwendet habe, um das Erstellen des bösartigen Termins zu replizieren. Ich habe das Code-Bild im...
Doctor Appointment System 1.0 - SQL Injection
SQL injection in the expertise parameter in searchresult.php in Doctor Appointment System v1.0. id: CVE-2021-27124 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: medium description: | SQL injection in the expertise parameter in searchresult.php in Doctor...
Doctor Appointment System 1.0 - SQL Injection
Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via lastname parameter. id: CVE-2021-27316 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind SQ...
Doctor Appointment System 1.0 - SQL Injection
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter. id: CVE-2021-27315 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind...
TrueBooker <= 1.0.2 - SQL Injection
The TrueBooker Appointment Booking and Scheduler Plugin. plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 1.0.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...
Doctor Appointment System 1.0 - SQL Injection
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter. id: CVE-2021-27320 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind S...
Doctor Appointment System 1.0 - SQL Injection
SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page. id: CVE-2021-27314 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: critical description: |...
Doctor Appointment System 1.0 - SQL Injection
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via email parameter. id: CVE-2021-27319 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind SQL...
CVE-2025-45805
CVE-2025-45805 PoC لـ CVE-2025-45805 المنتج المتأثر: نظام إدارة مواعيد الأطباء المطور: phpgurukul الإصدار: 1.0 نوع الثغرة: تخزين Cross-Site Scripting XSS الوصف: يمكن لمستخدم طبيب مُوثَّق حقن أكواد JavaScript عشوائية في حقل ملف الطبيب الاسم/رقم الموظف. يتم عرض الحمولة الضارة دون تنقية عندما يختار...
CVE-2025-29448
CVE-2025-29448 Descrição falha na lógica de agendamento no Easy!Appointments v1.5.1 permite que atacantes não autenticados criem compromissos com durações excessivamente longas, causando uma negação de serviço ao bloquear toda a disponibilidade futura de agendamentos. Passos para Reproduzir 1...
CVE-2026-16540-SimplyScheduleAppointments
CVE-2026-16540 — Simply Schedule Appointments 1.6.12.6 Divulgazione non autenticata dei dati degli appuntamenti e cancellazione di massa tramite endpoint purge...
CVE-2026-9830
Indagine su CVE-2026-9830 Panoramica Questa directory contiene report di intelligence sulle minacce per CVE-2026-9830, una vulnerabilità di bypass dell'autenticazione nel plugin WordPress BookingPress Appointment Booking Pro. File...
CVE-2026-15282
CVE-2026-15282 — Instant Appointment Massen-RCE-Exploit Pre-Auth filegetcontents + fileputcontents → PHP Webshell Übersicht CVE-2026-15282 ist eine kritische CVSS 9.8 nicht authentifizierte Schwachstelle für willkürlichen Dateiupload im Instant Appointment WordPress-Plugin ≤ 1.2. Die AJAX-Aktion...
