Lucene search
+L

2222 matches found

CNNVD
CNNVD
added 2023/02/27 12:00 a.m.8 views

Doctors Appointment System SQL注入漏洞

SourceCodester Doctor Appointment System is an application from SourceCodester USA. It provides an appointment scheduling feature. A SQL injection vulnerability exists in SourceCodester Doctors Appointment System version 1.0, which originates from a security issue in the file create-account.php...

8.8CVSS7.7AI score0.0076EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/02/27 12:00 a.m.9 views

PT-2023-16726 · Sourcecodester · Sourcecodester Doctors Appointment System

Name of the Vulnerable Software and Affected Versions: SourceCodester Doctors Appointment System version 1.0 Description: A critical vulnerability was found in the SourceCodester Doctors Appointment System. This issue affects the file /admin/doctors.php of the component Parameter Handler. The...

8.8CVSS7.2AI score0.00759EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2023/02/27 12:00 a.m.9 views

PT-2023-16723 · Sourcecodester · Sourcecodester Doctors Appointment System

Name of the Vulnerable Software and Affected Versions: SourceCodester Doctors Appointment System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /edoc/doctor/patient.php. The manipulation of the search12 argument leads to SQL...

8.8CVSS7.2AI score0.007EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/02/27 12:00 a.m.12 views

SourceCodester Doctors Appointment System SQL注入漏洞

SourceCodester Doctor Appointment System is an application from SourceCodester USA. It provides an appointment scheduling feature. A SQL injection vulnerability exists in the SourceCodester Doctors Appointment System version 1.0, which originates from a security issue with an unknown function in...

8.8CVSS6.5AI score0.00728EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2023/02/27 12:00 a.m.16 views

PT-2023-16730 · Sourcecodester · Sourcecodester Doctors Appointment System

Name of the Vulnerable Software and Affected Versions: SourceCodester Doctors Appointment System version 1.0 Description: A critical issue has been found in the Parameter Handler component of the /admin/patient.php file, where the manipulation of the search argument leads to sql injection. This...

8.8CVSS6.9AI score0.00728EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/02/27 12:00 a.m.9 views

SourceCodester Doctor Appointment System SQL注入漏洞

SourceCodester Doctor Appointment System is an application from SourceCodester USA. It provides an appointment scheduling feature. A SQL injection vulnerability exists in SourceCodester Doctors Appointment System version 1.0, which originates from an unknown function in the file /admin/edit-doc.p...

8.8CVSS7AI score0.007EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/02/27 12:00 a.m.9 views

SourceCodester Doctors Appointment System SQL注入漏洞

SourceCodester Doctor Appointment System is an application from SourceCodester USA. It provides an appointment scheduling feature. A SQL injection vulnerability exists in the SourceCodester Doctors Appointment System version 1.0, which originates from a security issue with an unknown function in...

8.8CVSS7AI score0.007EPSS
SaveExploits1References4
NVD
NVD
added 2023/02/26 12:15 p.m.12 views

CVE-2023-1036

A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /APR/signup.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross...

6.1CVSS4.8AI score0.00784EPSS
SaveExploits1References3
Prion
Prion
added 2023/02/26 12:15 p.m.20 views

Cross site scripting

A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /APR/signup.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross...

5CVSS6.1AI score0.00784EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/02/26 11:49 a.m.54 views

CVE-2023-1037

CVE-2023-1037 affects SourceCodester Dental Clinic Appointment Reservation System 1.0. The vulnerability is a SQL injection in the POST parameter handler for the file /APR/login.php where the username argument is manipulated. Exploitation can occur remotely and public exploitation has been disclo...

9.8CVSS8.9AI score0.00915EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/02/26 11:49 a.m.27 views

CVE-2023-1037 SourceCodester Dental Clinic Appointment Reservation System POST Parameter login.php sql injection

A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /APR/login.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql...

7.5CVSS10AI score0.00915EPSS
SaveExploits1References3
CVE
CVE
added 2023/02/26 11:49 a.m.90 views

CVE-2023-1036

The CVE-2023-1036 issue affects SourceCodester Dental Clinic Appointment Reservation System v1.0, specifically the POST Parameter Handler in the /APR/signup.php file. The root cause is manipulation of the firstname parameter, leading to cross-site scripting. Impact is described as a remotely init...

6.1CVSS4.8AI score0.00784EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/02/26 12:00 a.m.9 views

PT-2023-16707 · Sourcecodester · Sourcecodester Dental Clinic Appointment Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Dental Clinic Appointment Reservation System version 1.0 Description: A critical issue affects the processing of the file /APR/login.php, specifically the POST Parameter Handler component. The manipulation of the username...

9.8CVSS7.8AI score0.00915EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/02/26 12:00 a.m.8 views

Dental Clinic Appointment Reservation System 跨站脚本漏洞

Dental Clinic Appointment Reservation System is a Dental Clinic Appointment Reservation System by jkev Individual Developer. A cross-site scripting vulnerability exists in SourceCodester Dental Clinic Appointment Reservation System version 1.0, which stems from an incorrect manipulation of the...

6.1CVSS4.2AI score0.00784EPSS
SaveExploits1References4
NVD
NVD
added 2023/02/17 3:15 p.m.38 views

CVE-2020-29168

SQL Injection vulnerability in Projectworlds Online Doctor Appointment Booking System, allows attackers to gain sensitive information via the q parameter to the getuser.php endpoint...

9.8CVSS9.8AI score0.01244EPSS
SaveExploits1References3
Prion
Prion
added 2023/02/17 3:15 p.m.26 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WpDevArt Booking calendar, Appointment Booking System plugin = 3.2.3 versions affects plugin forms actions create, duplicate, edit, delete...

5.8CVSS5.6AI score0.00231EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/02/17 3:15 p.m.17 views

Sql injection

SQL Injection vulnerability in Projectworlds Online Doctor Appointment Booking System, allows attackers to gain sensitive information via the q parameter to the getuser.php endpoint...

7.5CVSS9.7AI score0.01244EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/02/17 2:25 p.m.55 views

CVE-2023-24388

The CVE-2023-24388 entry affects the WpDevArt Booking calendar, Appointment Booking System plugin for WordPress, specifically versions <= 3.2.3. The root cause is a Cross-Site Request Forgery (CSRF) vulnerability impacting plugin form actions (create, duplicate, edit, delete). Several connecte...

5.4CVSS5.5AI score0.00231EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/02/17 2:25 p.m.32 views

CVE-2023-24388 WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WpDevArt Booking calendar, Appointment Booking System plugin = 3.2.3 versions affects plugin forms actions create, duplicate, edit, delete...

4.3CVSS5.9AI score0.00231EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/02/17 12:00 a.m.12 views

PT-2023-11774 · Unknown · Projectworlds Online Doctor Appointment Booking System

Name of the Vulnerable Software and Affected Versions: Projectworlds Online Doctor Appointment Booking System affected versions not specified Description: The issue allows attackers to gain sensitive information via the "getuser.php" endpoint, specifically through the q parameter. This is a SQL...

9.8CVSS9.7AI score0.01244EPSS
SaveExploits1References5
Rows per page
Query Builder