Lucene search
+L

511 matches found

CNNVD
CNNVD
added 2025/05/17 12:00 a.m.12 views

SourceCodester Doctors Appointment System 注入漏洞

SourceCodester Doctors Appointment System is SourceCodester open source a doctor appointment system. An injection vulnerability exists in SourceCodester Doctors Appointment System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file...

9.8CVSS7.8AI score0.00514EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/05/17 12:00 a.m.12 views

SourceCodester Doctors Appointment System 注入漏洞

SourceCodester Doctors Appointment System is SourceCodester open source a doctor appointment system. An injection vulnerability exists in SourceCodester Doctors Appointment System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file...

9.8CVSS7.7AI score0.00514EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/05/17 12:00 a.m.8 views

SourceCodester Doctors Appointment System 注入漏洞

SourceCodester Doctors Appointment System is SourceCodester open source a doctor appointment system. An injection vulnerability exists in SourceCodester Doctors Appointment System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file...

9.8CVSS7.8AI score0.00514EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2025/05/17 12:00 a.m.10 views

PT-2025-21774 · Sourcecodester · Sourcecodester Doctors Appointment System

Name of the Vulnerable Software and Affected Versions: SourceCodester Doctor's Appointment System version 1.0 Description: A critical issue affects the processing of the file /admin/delete-doctor.php, specifically the GET Parameter Handler component. The manipulation of the ID argument leads to S...

9.8CVSS7.5AI score0.00514EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
added 2025/05/17 12:00 a.m.13 views

PT-2025-21770 · Sourcecodester · Sourcecodester Doctors Appointment System

Name of the Vulnerable Software and Affected Versions: SourceCodester Doctor's Appointment System version 1.0 Description: A critical issue affects an unknown part of the file /admin/appointment.php of the component GET Parameter Handler. The manipulation of the ID argument leads to SQL injection...

9.8CVSS7.6AI score0.00514EPSS
SaveExploits1References13
RedhatCVE
RedhatCVE
added 2025/04/05 9:20 p.m.31 views

CVE-2025-3180

A vulnerability classified as critical was found in projectworlds Online Doctor Appointment Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /doctor/deleteschedule.php. The manipulation of the argument ID leads to sql injection. The attack can be launched...

9.8CVSS7.7AI score0.00603EPSS
SaveExploits1References1
OSV
OSV
added 2025/04/04 12:15 a.m.9 views

CVE-2025-3186

A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /patient/invoice.php. The manipulation of the argument appid leads to sql injection. The attack can be...

9.8CVSS5.8AI score0.00562EPSS
SaveExploits1References4
OSV
OSV
added 2025/04/03 11:15 p.m.9 views

CVE-2025-3184

A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0 and classified as critical. This issue affects some unknown processing of the file /patient/profile.php?patientId=1. The manipulation of the argument patientFirstName leads to sql injection. The attack may be...

9.8CVSS5.8AI score0.00603EPSS
SaveExploits1References4
OSV
OSV
added 2025/04/03 11:15 p.m.9 views

CVE-2025-3185

A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. It has been classified as critical. Affected is an unknown function of the file /patient/patientupdateprofile.php. The manipulation of the argument patientFirstName leads to sql injection. It is possible to...

9.8CVSS5.8AI score0.00639EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/04/03 11:00 p.m.10 views

CVE-2025-3185 projectworlds Online Doctor Appointment Booking System patientupdateprofile.php sql injection

A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. It has been classified as critical. Affected is an unknown function of the file /patient/patientupdateprofile.php. The manipulation of the argument patientFirstName leads to sql injection. It is possible to...

7.5CVSS7.6AI score0.00639EPSS
SaveExploits1References4
CVE
CVE
added 2025/04/03 11:00 p.m.56 views

CVE-2025-3185

Vulnerability CVE-2025-3185 affects Projectworlds Online Doctor Appointment Booking System 1.0. The /patient/patientupdateprofile.php endpoint’s patientFirstName parameter can be manipulated to trigger SQL injection, with remote exploitation reportedly possible and publicly disclosed. Multiple co...

9.8CVSS7.6AI score0.00639EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2025/04/03 10:31 p.m.26 views

CVE-2025-3184 projectworlds Online Doctor Appointment Booking System profile.php sql injection

A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0 and classified as critical. This issue affects some unknown processing of the file /patient/profile.php?patientId=1. The manipulation of the argument patientFirstName leads to sql injection. The attack may be...

7.5CVSS0.00603EPSS
SaveExploits1References4
NVD
NVD
added 2025/04/03 10:15 p.m.12 views

CVE-2025-3181

A vulnerability, which was classified as critical, has been found in projectworlds Online Doctor Appointment Booking System 1.0. Affected by this issue is some unknown functionality of the file /patient/appointment.php?scheduleDate=1&appid=1. The manipulation of the argument scheduleDate leads to...

9.8CVSS0.00603EPSS
SaveExploits1References4
CVE
CVE
added 2025/04/03 10:00 p.m.56 views

CVE-2025-3183

The CVE-2025-3183 entry concerns Project Worlds' Online Doctor Appointment Booking System v1.0. Affected component is the file /patient/patientupdateprofile.php, where manipulating the patientFirstName parameter yields SQL injection. The vulnerability is exploitable remotely and is publicly discl...

9.8CVSS7.8AI score0.00603EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2025/04/03 9:15 p.m.20 views

CVE-2025-3178

A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /doctor/deleteappointment.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated...

9.8CVSS0.00603EPSS
SaveExploits1References4
NVD
NVD
added 2025/04/03 9:15 p.m.14 views

CVE-2025-3179

A vulnerability classified as critical has been found in projectworlds Online Doctor Appointment Booking System 1.0. Affected is an unknown function of the file /doctor/deletepatient.php. The manipulation of the argument ic leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS0.00603EPSS
SaveExploits1References4
OSV
OSV
added 2025/04/03 9:15 p.m.12 views

CVE-2025-3180

A vulnerability classified as critical was found in projectworlds Online Doctor Appointment Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /doctor/deleteschedule.php. The manipulation of the argument ID leads to sql injection. The attack can be launched...

9.8CVSS5.8AI score0.00603EPSS
SaveExploits1References4
OSV
OSV
added 2025/04/03 9:15 p.m.14 views

CVE-2025-3178

A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /doctor/deleteappointment.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated...

9.8CVSS5.8AI score0.00603EPSS
SaveExploits1References4
CVE
CVE
added 2025/04/03 9:00 p.m.64 views

CVE-2025-3179

CVE-2025-3179 affects projectworlds Online Doctor Appointment Booking System 1.0. The vulnerability exists in the unknown function of /doctor/deletepatient.php where manipulating the ic parameter results in SQL injection. It is exploitable remotely, and exploits have been disclosed publicly. Seve...

9.8CVSS7.7AI score0.00603EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2025/04/03 12:00 a.m.10 views

Project Worlds Online Doctor Appointment Booking System 注入漏洞

Project Worlds Online Doctor Appointment Booking System is an online doctor appointment booking system from Project Worlds, Inc. An injection vulnerability exists in Project Worlds Online Doctor Appointment Booking System version 1.0, which stems from an incorrect operation of the parameter...

9.8CVSS8AI score0.00603EPSS
SaveExploits1References4
Rows per page
Query Builder