CVE-2022-45730

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function...

CVE-2022-46128: Improper Neutralization of Input During Web Page Generation

phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting XSS via searchdata=...

CVE-2022-45730

CVE-2022-45730 is an XSS vulnerability in Doctor Appointment Management System v1.0.0, where a crafted payload injected into the Search function can execute arbitrary scripts/HTML. Concrete details across sources confirm the affected software and the input point (Search). Some reports (PT-2023-14...

CVE-2022-45730: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function...

CVE-2022-46128

Affected software: phpgurukul Doctor Appointment Management System v1.0.0. Vulnerability: Cross-Site Scripting (XSS) via the searchdata parameter. Underlying details: CVSS v3.1 base score 6.1 (MEDIUM); attack vector: network; attack complexity: low; privileges required: none; user interaction req...

CVE-2022-45729

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee ID parameter...

CVE-2022-45728

Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2022-45729

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee ID parameter...

Cross site scripting

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee ID parameter...

Cross site scripting

Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2022-45728

Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2022-45729

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee ID parameter...

CVE-2022-45729

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee ID parameter...

CVE-2022-45728

CVE-2022-45728 concerns Doctor Appointment Management System v1.0.0 with a cross-site scripting (XSS) vulnerability. The initial records specify XSS as the issue; CVSS 3.1 metrics show a Medium severity (6.1) with network attack vector, low complexity, no privileges required, user interaction req...

CVE-2022-45728: Improper Neutralization of Input During Web Page Generation

Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2022-45728

Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2022-45729: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee ID parameter...

CVE-2022-45729

Summary (CVE-2022-45729) : Affected software is Doctor Appointment Management System, version 1.0.0. The vulnerability is a Cross-Site Scripting (XSS) issue reachable via a crafted payload injected into the Employee ID parameter . The underlying cause is an XSS flaw in the handling of this parame...

CVE-2022-43125

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/manageappointment.php...

CVE-2022-0720

CVE-2022-0720 affects the WordPress Amelia plugin prior to 1.0.47. The described vulnerability is improper authorization when managing appointments, allowing any customer to update someone else’s booking and to retrieve sensitive information (full name and phone number). The issue is supported by...