CVE-2022-45730

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function...

Cross site scripting

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function...

CVE-2022-45730

CVE-2022-45730 is an XSS vulnerability in Doctor Appointment Management System v1.0.0, where a crafted payload injected into the Search function can execute arbitrary scripts/HTML. Concrete details across sources confirm the affected software and the input point (Search). Some reports (PT-2023-14...

CVE-2022-46128

phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting XSS via searchdata=...

CVE-2022-46128

Affected software: phpgurukul Doctor Appointment Management System v1.0.0. Vulnerability: Cross-Site Scripting (XSS) via the searchdata parameter. Underlying details: CVSS v3.1 base score 6.1 (MEDIUM); attack vector: network; attack complexity: low; privileges required: none; user interaction req...

CVE-2022-45730

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function...

CVE-2022-45729

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee ID parameter...

CVE-2022-45728

Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2022-45729

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee ID parameter...

Cross site scripting

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee ID parameter...

Cross site scripting

Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2022-45729

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee ID parameter...

CVE-2022-45728

CVE-2022-45728 concerns Doctor Appointment Management System v1.0.0 with a cross-site scripting (XSS) vulnerability. The initial records specify XSS as the issue; CVSS 3.1 metrics show a Medium severity (6.1) with network attack vector, low complexity, no privileges required, user interaction req...

CVE-2022-45729

Summary (CVE-2022-45729) : Affected software is Doctor Appointment Management System, version 1.0.0. The vulnerability is a Cross-Site Scripting (XSS) issue reachable via a crafted payload injected into the Employee ID parameter . The underlying cause is an XSS flaw in the handling of this parame...

CVE-2022-45728

Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2022-45728

Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2022-45729

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee ID parameter...

CVE-2022-43125

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/manageappointment.php...

CVE-2022-0720

CVE-2022-0720 affects the WordPress Amelia plugin prior to 1.0.47. The described vulnerability is improper authorization when managing appointments, allowing any customer to update someone else’s booking and to retrieve sensitive information (full name and phone number). The issue is supported by...

Amelia < 1.0.49 - Customer+ Arbitrary Appointments Status Update

The plugin does not have proper authorisation when managing appointments, allowing any customer to update other's booking status, as well as retrieve sensitive information about the bookings, such as the full name and phone number of the person who booked it. PoC 1. Make a booking to become...