Patient Appointment Scheduler System 1.0 - Unauthenticated File Upload & Remote Code Execution

Exploit Title: Patient Appointment Scheduler System 1.0 - Unauthenticated File Upload & Remote Code Execution RCE Exploit Author: a-rey Vendor Homepage: https://www.sourcecodester.com/php/14928/patient-appointment-scheduler-system-using-php-free-source-code.html Software Link:...

Patient Appointment Scheduler System 1.0 - Persistent / Stored XSS Exploit

Exploit Title: Patient Appointment Scheduler System 1.0 - Persistent/Stored XSS Exploit Author: a-rey Vendor Homepage: https://www.sourcecodester.com/php/14928/patient-appointment-scheduler-system-using-php-free-source-code.html Software Link: https://www.sourcecodester.com/download-code?nid=1492...

OTRS 跨站脚本漏洞

OTRS is a service management software application from OTRS Germany. OTRS AG OTRS has a security vulnerability that originates from a request that can be generated for the appointment editing screen. An attacker could exploit the vulnerability to cause an XSS attack...

exploits

exploits Published PoCs can be found at exploitdb.comh...

Exploit for Cross-site Scripting in Online_Doctor_Appointment_System_Php_Full_Source_Code_Project Online_Doctor_Appointment_System_Php_Full_Source_Code

CVE-2021-25791-Multiple-Stored-XSS : Multiple Stored XSS Onlin...

Book appointment Online < 1.39 - Authenticated Stored Cross-Site Scripting (XSS)

The plugin does not sanitise or escape Service Prices before outputting it in the List, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. PoC In the admin dashboard navigate to Services Add service and put the...

CVE-2021-38152

index.php/appointment/insertpatientaddappointment in Chikitsa Patient Management System 2.0.0 allows XSS...

CVE-2021-38151

index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS...

Cross site scripting

index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS...

CVE-2021-38151

index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS...

Chikitsa Patient Management System 跨站脚本漏洞

Chikitsa Patient Management System is a software application. An open source patient management software that is fast, responsive and easy to use. A cross-site scripting vulnerability exists in Chikitsa Patient Management System version 2.0.0, which originates from XSS in the system's...

COVID-19 vaccine appointment system attacked in Italy

In another cyberattack on a healthcare system, threat-actors have tried to throw a wrench into the ongoing COVID-19 vaccine roll-out in the region of Lazio, Italy. The large and densely populated region is the countrys second most populous and includes the countrys capital, Rome. On Sunday the...

CVE-2021-25791

Multiple stored cross site scripting XSS vulnerabilities in the "Update Profile" module of Online Doctor Appointment System 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads in the First Name, Last Name, and Address text fields...

CVE-2021-25791

Multiple stored cross site scripting XSS vulnerabilities in the "Update Profile" module of Online Doctor Appointment System 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads in the First Name, Last Name, and Address text fields...

Cross site scripting

Multiple stored cross site scripting XSS vulnerabilities in the "Update Profile" module of Online Doctor Appointment System 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads in the First Name, Last Name, and Address text fields...

CVE-2021-25791

Multiple stored cross site scripting XSS vulnerabilities in the "Update Profile" module of Online Doctor Appointment System 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads in the First Name, Last Name, and Address text fields...

CVE-2021-25791

Multiple stored cross site scripting XSS vulnerabilities in the "Update Profile" module of Online Doctor Appointment System 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads in the First Name, Last Name, and Address text fields...

CVE-2021-25791

CVE-2021-25791 affects Online Doctor Appointment System 1.0 and describes multiple stored XSS in the Update Profile module. Vulnerable component: First Name, Last Name, and Address fields where user input is stored and later rendered. Impact: authenticated users can execute arbitrary web scripts ...

Online Doctor Appointment System 跨站脚本漏洞

Online Doctor Appointment System is an online doctor appointment system developed using PHP, JavaScript and CSS. A cross-site scripting vulnerability exists in Online Doctor Appointment System 1.0 that allows an authenticated attacker to execute arbitrary web script or HTML via a crafted payload ...

Booking Calendar | Appointment Booking | BookIt < 2.1.6 - Authorised AJAX Calls

The plugin does not properly check for CSRF in some of its AJAX actions, allowing them to be bypassed. Attackers could make logged in users call them and perform unwanted actions...