2236 matches found
CVE-2023-23397-POC
CVE-2023-23397-POC Exploit POC for CVE-2023-23397 Appointment.cs : the modified file from https://github.com/Sicos1977/MsgKit/blob/master/MsgKit/Appointment.cs Exploit.cs : the code i used to replicate creating the malicious appointment . i modified the code picture in MDSEC article here :...
CVE-2023-23397
CVE-2023-23397 CVE-2023-23397 C PoC 1- msgkit डाउनलोड करें 2- appointment वर्ग को संपादित करें और नीचे जोड़ें: 3- प्रोजेक्ट के अंदर एक नया वर्ग बनाएं ताकि msg फ़ाइल के गुण सेट किए जा सकें: root@kitploit: using MsgKit.Enums; using System; using System.Collections.Generic; using System.Linq; using...
CVE-2025-46181-XSS
CVE-2025-46181 - 온라인 예약 시스템에서 발견된 반사형 XSSReflected XSS CVE-ID : CVE-2025-46181 발견자 : Shemkumar P shemkumar.github.io 취약점 유형 : 반사형 교차 사이트 스크립팅Reflected XSS 심각도 : 중간Medium 상태 : 공개됨, MITRE에서 CVE 지정 ✨ 설명 공개 온라인 예약 시스템v1.0의 예약 확인confirmation을 처리하는 페이지에서 반사형 교차 사이트 스크립팅Reflected XSS 취약점이 발견되었습니다. GET...
CVE-2025-45805
CVE-2025-45805 PoC do CVE-2025-45805 Produto Afetado: Doctor Appointment Management System Fornecedor: phpgurukul Versão: 1.0 Tipo de Vulnerabilidade: Stored Cross-Site Scripting XSS Descrição: Um usuário médico autenticado pode injetar código JavaScript arbitrário no campo de perfil do médico...
exploits
exploits يمكن العثور على إثباتات المفهوم المنشورة PoCs على exploitdb.com Patient Appointment Scheduler System v1.0: Inbit Messenger v4.6.0:...
instant-appointment-arbitrary-file-upload
instant-appointment-arbitrary-file-upload instant-appointment - Caricamento arbitrario di file Descrizione Il plugin Instant Appointment per WordPress è vulnerabile al caricamento arbitrario di file nelle versioni fino alla 1.2 inclusa. Ciò consente ad attaccanti non autenticati di caricare una...
CVE-2021-25791-Multiple-Stored-XSS
CVE-2021-25791-Multiple-Stored-XSS : Множественные хранимые XSS в системе онлайн-записи к врачу В системе онлайн-записи к врачу версии 1.0 существует множество хранимых аутентифицированных межсайтовых сценариев XSS. Ссылка на ПО:...
CVE-2025-7753
🚨 CVE-2025-7753 — Exploit PoC di SQL Injection Autore: Byte Reaper Telegram: @ByteReaper0 CVE: CVE‑2025‑7753 Vulnerabilità: SQL Injection non autenticata, basata sul tempo 🔍 Panoramica Una vulnerabilità critica di SQL Injection esiste in Online Appointment Booking System 1.0 Code‑Projects nel fil...
Doctor Appointment System 1.0 - SQL Injection
SQL injection in the expertise parameter in searchresult.php in Doctor Appointment System v1.0. id: CVE-2021-27124 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: medium description: | SQL injection in the expertise parameter in searchresult.php in Doctor...
Doctor Appointment System 1.0 - SQL Injection
Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via lastname parameter. id: CVE-2021-27316 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind SQ...
Doctor Appointment System 1.0 - SQL Injection
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter. id: CVE-2021-27315 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind...
Doctor Appointment System 1.0 - SQL Injection
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via email parameter. id: CVE-2021-27319 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind SQL...
Doctor Appointment System 1.0 - SQL Injection
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter. id: CVE-2021-27320 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind S...
Doctor Appointment System 1.0 - SQL Injection
SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page. id: CVE-2021-27314 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: critical description: |...
TrueBooker <= 1.0.2 - SQL Injection
The TrueBooker Appointment Booking and Scheduler Plugin. plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 1.0.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...
CVE-2025-29448
CVE-2025-29448 Descrição falha na lógica de agendamento no Easy!Appointments v1.5.1 permite que atacantes não autenticados criem compromissos com durações excessivamente longas, causando uma negação de serviço ao bloquear toda a disponibilidade futura de agendamentos. Passos para Reproduzir 1...
CVE-2026-16540-SimplyScheduleAppointments
CVE-2026-16540 — Simply Schedule Appointments 1.6.12.6 Divulgazione non autenticata dei dati degli appuntamenti e cancellazione di massa tramite endpoint purge...
CVE-2026-9830
Indagine su CVE-2026-9830 Panoramica Questa directory contiene report di intelligence sulle minacce per CVE-2026-9830, una vulnerabilità di bypass dell'autenticazione nel plugin WordPress BookingPress Appointment Booking Pro. File...
CVE-2026-15282
CVE-2026-15282 — Instant Appointment Massen-RCE-Exploit Pre-Auth filegetcontents + fileputcontents → PHP Webshell Übersicht CVE-2026-15282 ist eine kritische CVSS 9.8 nicht authentifizierte Schwachstelle für willkürlichen Dateiupload im Instant Appointment WordPress-Plugin ≤ 1.2. Die AJAX-Aktion...
