Lucene search
K

17 matches found

RedhatCVE
RedhatCVE
added 2025/12/09 12:11 a.m.3 views

CVE-2025-64081

SQL injection vulnerability in /php/apipatientschedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter...

9.8CVSS8.8AI score0.00052EPSS
Exploits3References1
EUVD
EUVD
added 2025/12/08 6:30 p.m.3 views

EUVD-2025-201798

SQL injection vulnerability in /php/apipatientschedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter...

9.8CVSS8.1AI score0.00052EPSS
Exploits3References3
OSV
OSV
added 2025/12/08 6:15 p.m.0 views

CVE-2025-64081

SQL injection vulnerability in /php/apipatientschedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter...

9.8CVSS6.1AI score
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/08 12:0 a.m.1 views

CVE-2025-64081

SQL injection vulnerability in /php/apipatientschedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter...

8.2AI score0.00052EPSS
Exploits3References2
CNNVD
CNNVD
added 2025/12/08 12:0 a.m.1 views

SourceCodester Patients Waiting Area Queue Management System SQL注入漏洞

SourceCodester Patients Waiting Area Queue Management System is SourceCodester open source a patient waiting area queue management system. SourceCodester Patients Waiting Area Queue Management System v1 version exists SQL injection vulnerability , the vulnerability stems from /...

9.8CVSS7.7AI score0.00052EPSS
Exploits3References3
RedhatCVE
RedhatCVE
added 2025/11/17 11:13 a.m.4 views

CVE-2025-13248

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown function of the file /php/apipatientschedule.php. This manipulation of the argument appointmentID causes sql injection. The attack can be initiated remotely. The...

9.8CVSS7.4AI score0.00028EPSS
Exploits1References1
NVD
NVD
added 2025/11/16 11:15 a.m.1 views

CVE-2025-13248

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown function of the file /php/apipatientschedule.php. This manipulation of the argument appointmentID causes sql injection. The attack can be initiated remotely. The...

9.8CVSS0.00028EPSS
Exploits1References5
OSV
OSV
added 2025/11/16 11:15 a.m.2 views

CVE-2025-13248

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown function of the file /php/apipatientschedule.php. This manipulation of the argument appointmentID causes sql injection. The attack can be initiated remotely. The...

9.8CVSS5.8AI score
Exploits0References5
CNNVD
CNNVD
added 2025/11/16 12:0 a.m.1 views

SourceCodester Patients Waiting Area Queue Management System SQL注入漏洞

SourceCodester Patients Waiting Area Queue Management System is a SourceCodester open source patient waiting area queue management system. A SQL injection vulnerability exists in SourceCodester Patients Waiting Area Queue Management System version 1.0, which stems from incorrect manipulation of t...

9.8CVSS7.8AI score0.00028EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/11/16 12:0 a.m.3 views

PT-2025-47083

Name of the Vulnerable Software and Affected Versions SourceCodester Patients Waiting Area Queue Management System version 1.0 Description A flaw exists in SourceCodester Patients Waiting Area Queue Management System 1.0. The issue involves SQL injection stemming from manipulation of the...

9.8CVSS7.5AI score0.00028EPSS
Exploits1References12
Positive Technologies
Positive Technologies
added 2025/11/13 12:0 a.m.3 views

PT-2025-46877

Name of the Vulnerable Software and Affected Versions SourceCodester Patients Waiting Area Queue Management System version 1.0 Description A flaw exists in the software that allows for remote SQL injection. The issue is located in the getPatientAppointment function within the /php/api patient...

7.5CVSS7AI score0.00032EPSS
Exploits1References6
OSV
OSV
added 2025/11/07 6:15 p.m.0 views

CVE-2025-63718

A SQL injection vulnerability exists in the SourceCodester PQMS Patient Queue Management System 1.0 in the apipatientschedule.php endpoint. The appointmentID parameter is not properly sanitized, allowing attackers to execute arbitrary SQL commands...

6.5CVSS6.1AI score0.00039EPSS
Exploits1References2
NVD
NVD
added 2025/11/07 6:15 p.m.2 views

CVE-2025-63718

A SQL injection vulnerability exists in the SourceCodester PQMS Patient Queue Management System 1.0 in the apipatientschedule.php endpoint. The appointmentID parameter is not properly sanitized, allowing attackers to execute arbitrary SQL commands...

6.5CVSS0.00039EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/11/07 12:0 a.m.1 views

SourceCodester PQMS 安全漏洞

SourceCodester PQMS is an open source product quality management system from SourceCodester. A security vulnerability exists in SourceCodester PQMS version 1.0, which stems from improper cleanup of the appointmentID parameter in the apipatientschedule.php endpoint, which could lead to the executi...

6.5CVSS7.6AI score0.00039EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/11/07 12:0 a.m.4 views

PT-2025-45480

Name of the Vulnerable Software and Affected Versions SourceCodester PQMS version 1.0 Description A SQL injection issue exists in the Patient Queue Management System. The api patient schedule.php endpoint is affected because the appointmentID parameter does not receive proper sanitization,...

8.1AI score0.00039EPSS
Exploits1References6
OSV
OSV
added 2024/03/19 12:15 p.m.0 views

CVE-2023-40278

An issue was discovered in OpenClinic GA 5.247.01. An Information Disclosure vulnerability has been identified in the printAppointmentPdf.jsp component of OpenClinic GA. By changing the AppointmentUid parameter, an attacker can determine whether a specific appointment exists based on the error...

7.5CVSS5.7AI score0.11342EPSS
Exploits4References2
Positive Technologies
Positive Technologies
added 2020/08/26 12:0 a.m.5 views

PT-2020-15678 · Etoile Web Design · Etoile Web Design Ultimate Appointment Booking & Scheduling Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Etoile Web Design Ultimate Appointment Booking & Scheduling WordPress Plugin versions 1.1.9 and lower Description: The issue is related to a reflected XSS vulnerability. It occurs because the Appointment ID GET parameter value is not properly...

6.1CVSS5.9AI score0.00264EPSS
Exploits2References4
Rows per page
Query Builder