Doctor Appointment Management System 跨站脚本漏洞

Doctor Appointment Management System is a Doctor Appointment Management System by the individual developer ANUJ KUMAR. A security vulnerability exists in Doctor Appointment Management System v1.0.0, which originates from the presence of cross-site scripting XSS...

CVE-2022-45728

Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting XSS vulnerability...

Doctor Appointment Management System 跨站脚本漏洞

Doctor Appointment Management System is a doctor appointment management system from the individual developer ANUJ KUMAR. A security vulnerability exists in Doctor Appointment Management System version v1.0.0 that originates from a crafted payload that allows an attacker to execute arbitrary web...

Doctor Appointment Management System 跨站脚本漏洞

Doctor Appointment Management System is a Doctor Appointment Management System by the individual developer ANUJ KUMAR. A security vulnerability exists in Doctor Appointment Management System v1.0.0, which originates from a cross-site scripting XSS attack on the fname component...

PT-2023-14739 · Unknown · Doctor Appointment Management System

Name of the Vulnerable Software and Affected Versions: Doctor Appointment Management System version 1.0.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee ID parameter. Recommendations: For...

PT-2023-14738 · Unknown · Doctor Appointment Management System

Name of the Vulnerable Software and Affected Versions: Doctor Appointment Management System version 1.0.0 Description: The issue is related to a cross-site scripting XSS vulnerability. Cross-site scripting is a type of security vulnerability that occurs when an attacker is able to inject maliciou...

Doctors Appointment System 1.0 Cross Site Scripting / SQL Injection Vulnerabilities

Exploit Title: Doctor's Appointment System v1.0 - Cross-Site Scripting XSS Google Dork: N/A Exploit Author: Abdullah Zaid - @aznull Vendor Homepage: https://www.sourcecodester.com/hashenudara/simple-doctors-appointment-project.html Software Link:...

Doctor's Appointment System 1.0 Cross Site Scripting

Exploit Title: Doctor's Appointment System v1.0 - Cross-Site Scripting XSS Google Dork: N/A Date: 7/13/2022 Exploit Author: Abdullah Zaid - @aznull Vendor Homepage: https://www.sourcecodester.com/hashenudara/simple-doctors-appointment-project.html Software Link:...

Doctor's Appointment System 1.0 SQL Injection

Exploit Title: SQLi - Doctor's Appointment System v1.0 Google Dork: N/A Date: 7/13/2022 Exploit Author: Abdullah Zaid - @aznull Vendor Homepage: https://www.sourcecodester.com/hashenudara/simple-doctors-appointment-project.html Software Link:...

CVE-2022-36203

Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting XSS via the admin panel. In addition, it leads to takeover the administrator account by stealing the cookie via XSS...

CVE-2022-36201

Doctor’s Appointment System v1.0 is vulnerable to Blind SQLi via settings.php...

CVE-2022-36202

Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php. The settings.php is affected by Broken Access Control IDOR via id= parameter...

CVE-2022-36202

Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php. The settings.php is affected by Broken Access Control IDOR via id= parameter...

CVE-2022-36201

Doctor’s Appointment System v1.0 is vulnerable to Blind SQLi via settings.php...

CVE-2022-36203

Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting XSS via the admin panel. In addition, it leads to takeover the administrator account by stealing the cookie via XSS...

CVE-2022-36201

Doctor’s Appointment System v1.0 is vulnerable to Blind SQLi via settings.php...

Design/Logic Flaw

Doctor’s Appointment System v1.0 is vulnerable to Blind SQLi via settings.php...

CVE-2022-36201

Doctor’s Appointment System v1.0 is vulnerable to Blind SQLi via settings.php...

CVE-2022-36201

CVE-2022-36201 affects Doctor’s Appointment System v1.0. A blind SQL injection vulnerability exists in settings.php and is also exploitable via the id parameter in booking.php, enabling attackers to potentially access or modify data. The issue is documented with a high severity (CVSS v3.1: 9.8, c...

CVE-2022-36202

CVE-2022-36202 affects Doctor's Appointment System1.0, specifically the edoc/patient/settings.php component. The vulnerability is an IDOR/Broken Access Control in the id= parameter, enabling unauthorized access to settings. The CVSS v3.1 base score is 9.8 (CRITICAL) with NETWORK attack vector, an...