Lucene search
+L

574 matches found

CNNVD
CNNVD
•added 2024/10/30 12:00 a.m.•12 views

PHPGurukul Doctor Appointment Management System 安全漏洞

Doctor Appointment Management System is a doctor appointment management system. Doctor Appointment Management System suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an...

5.4CVSS6AI score0.00265EPSS
SaveExploits0References2
NVD
NVD
•added 2024/10/28 3:15 p.m.•44 views

CVE-2024-10449

A vulnerability, which was classified as critical, was found in Codezips Hospital Appointment System 1.0. This affects an unknown part of the file /loginAction.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

9.8CVSS0.01441EPSS
SaveExploits1References4
OSV
OSV
•added 2024/10/28 3:15 p.m.•13 views

CVE-2024-10449

A vulnerability, which was classified as critical, was found in Codezips Hospital Appointment System 1.0. This affects an unknown part of the file /loginAction.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

9.8CVSS5.7AI score0.01441EPSS
SaveExploits1References4
CVE
CVE
•added 2024/10/28 2:31 p.m.•71 views

CVE-2024-10449

CV_E-2024-10449 affects Codezips Hospital Appointment System 1.0. The vulnerability is in /loginAction.php where manipulating the Username parameter enables SQL injection. It can be exploited remotely and public disclosures exist; multiple sources rate it as critical/high impact with potential co...

9.8CVSS7.7AI score0.01441EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2024/10/28 2:31 p.m.•40 views

CVE-2024-10449 Codezips Hospital Appointment System loginAction.php sql injection

A vulnerability, which was classified as critical, was found in Codezips Hospital Appointment System 1.0. This affects an unknown part of the file /loginAction.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

7.5CVSS0.01441EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/10/28 2:31 p.m.•25 views

CVE-2024-10449 Codezips Hospital Appointment System loginAction.php sql injection

A vulnerability, which was classified as critical, was found in Codezips Hospital Appointment System 1.0. This affects an unknown part of the file /loginAction.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

7.5CVSS7.5AI score0.01441EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/28 12:00 a.m.•6 views

CVE-2024-10449: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in Codezips Hospital Appointment System 1.0. This affects an unknown part of the file /loginAction.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

9.8CVSS7AI score0.01441EPSS
SaveExploits1References1
NVD
NVD
•added 2024/10/10 11:15 p.m.•28 views

CVE-2024-9818

A vulnerability classified as critical has been found in SourceCodester Online Veterinary Appointment System 1.0. Affected is an unknown function of the file /admin/categories/managecategory.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...

9.8CVSS0.00646EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/10/10 10:31 p.m.•45 views

CVE-2024-9818 SourceCodester Online Veterinary Appointment System manage_category.php sql injection

A vulnerability classified as critical has been found in SourceCodester Online Veterinary Appointment System 1.0. Affected is an unknown function of the file /admin/categories/managecategory.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...

7.5CVSS0.00646EPSS
SaveExploits1References5
CVE
CVE
•added 2024/10/10 10:31 p.m.•99 views

CVE-2024-9818

CVE-2024-9818 affects SourceCodester Online Veterinary Appointment System 1.0. The vulnerability is an SQL injection in an unknown function of /admin/categories/manage_category.php triggered by manipulating the id parameter. It can be exploited remotely and exploitation/public disclosure is noted...

9.8CVSS7.7AI score0.00646EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/10 12:00 a.m.•5 views

CVE-2024-9818: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Online Veterinary Appointment System 1.0. Affected is an unknown function of the file /admin/categories/managecategory.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...

9.8CVSS7AI score0.00646EPSS
SaveExploits1References1
Packet Storm
Packet Storm
•added 2024/08/29 12:00 a.m.•181 views

Online Appointment System 1.0 Insecure Settings

==================================================================================================================================== | Title : Online Appointment System v1.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1...

7.4AI score
SaveExploits0
OSV
OSV
•added 2024/06/03 10:15 p.m.•20 views

CVE-2023-24373

External Control of Assumed-Immutable Web Parameter vulnerability in WpDevArt Booking calendar, Appointment Booking System allows Manipulating Hidden Fields.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.3...

9.8CVSS5.8AI score0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/27 10:31 p.m.•43 views

CVE-2024-4294 PHPGurukul Doctor Appointment Management System view-appointment-detail.php resource injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Doctor Appointment Management System 1.0. Affected by this issue is some unknown functionality of the file /doctor/view-appointment-detail.php. The manipulation of the argument editid leads to improper control of...

6.5CVSS6.8AI score0.00855EPSS
SaveExploits1References4
OSV
OSV
•added 2024/04/27 10:15 p.m.•15 views

CVE-2024-4293

A vulnerability classified as problematic was found in PHPGurukul Doctor Appointment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file appointment-bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to cross site scriptin...

5.4CVSS3.8AI score0.00635EPSS
SaveExploits3References4
CNNVD
CNNVD
•added 2024/04/27 12:00 a.m.•16 views

Doctor Appointment Management System 安全漏洞

Doctor Appointment Management System is a doctor appointment management system by the individual developer ANUJ KUMAR. A security vulnerability exists in Doctor Appointment Management System version 1.0, which stems from the parameter editid in the file /doctor/view-appointment-detail.php that...

8.8CVSS6.8AI score0.00855EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/04/27 12:00 a.m.•18 views

Doctor Appointment Management System 跨站脚本漏洞

Doctor Appointment Management System is a doctor appointment management system by the individual developer ANUJ KUMAR. A cross-site scripting vulnerability exists in Doctor Appointment Management System version 1.0, which stems from the parameter fromdate/todate in the file...

5.4CVSS6AI score0.00635EPSS
SaveExploits3References6
OSV
OSV
•added 2023/09/11 8:15 p.m.•17 views

CVE-2023-40945

Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php...

9.8CVSS5.8AI score0.00934EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/09/11 8:15 p.m.•12 views

CVE-2023-40945

Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php...

9.8CVSS5.8AI score0.00934EPSS
SaveExploits1References2
NVD
NVD
•added 2023/09/11 8:15 p.m.•30 views

CVE-2023-40945

Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php...

9.8CVSS9.8AI score0.00934EPSS
SaveExploits1References1
Rows per page
Query Builder