Lucene search
+L

2236 matches found

Cvelist
Cvelist
added 2025/12/19 6:48 a.m.35 views

CVE-2025-13754 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.9.16 - Missing Authorization to Unauthenticated Sensitive Information Exposure

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.9.16. This is due to the plugin exposing its admin embed endpoint at /wp-json/ssa/v1/embed-inner-admin without...

5.3CVSS0.00353EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/19 6:30 a.m.10 views

EUVD-2025-204440

A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the file /admin/deletemanager.php. The manipulation of the argument managername results in sql injection. The attack may be performed from remote. The exploit has been made public...

5.8CVSS6.3AI score0.00313EPSS
SaveExploits1References6
NVD
NVD
added 2025/12/19 4:16 a.m.15 views

CVE-2025-14939

A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the file /admin/deletemanager.php. The manipulation of the argument managername results in sql injection. The attack may be performed from remote. The exploit has been made public...

7.2CVSS0.00313EPSS
SaveExploits1References5
OSV
OSV
added 2025/12/19 4:16 a.m.10 views

CVE-2025-14939

A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the file /admin/deletemanager.php. The manipulation of the argument managername results in sql injection. The attack may be performed from remote. The exploit has been made public...

7.2CVSS5.6AI score0.00313EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/12/19 4:02 a.m.4 views

CVE-2025-14939 code-projects Online Appointment Booking System deletemanager.php sql injection

A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the file /admin/deletemanager.php. The manipulation of the argument managername results in sql injection. The attack may be performed from remote. The exploit has been made public...

5.8CVSS6.5AI score0.00313EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/12/19 4:02 a.m.42 views

CVE-2025-14939 code-projects Online Appointment Booking System deletemanager.php sql injection

A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the file /admin/deletemanager.php. The manipulation of the argument managername results in sql injection. The attack may be performed from remote. The exploit has been made public...

5.8CVSS0.00313EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/19 12:00 a.m.9 views

Code-Projects Online Appointment Booking System SQL注入漏洞

Online Appointment Booking System is an online appointment booking system. Online Appointment Booking System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter managername in the file /admin/deletemanager.ph...

7.2CVSS5.8AI score0.00313EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/12/19 12:00 a.m.12 views

PT-2025-52410

Name of the Vulnerable Software and Affected Versions Online Appointment Booking System version 1.0 Description A flaw exists in the Online Appointment Booking System that allows for SQL injection. The issue is located in the /admin/deletemanager.php file, specifically through manipulation of the...

7.2CVSS5.2AI score0.00313EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/12/19 12:00 a.m.19 views

WordPress plugin Appointment Booking Calendar 安全漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin Appointment Booking...

5.3CVSS5.6AI score0.00353EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/12/18 10:37 p.m.8 views

CVE-2025-14833

A security flaw has been discovered in code-projects Online Appointment Booking System 1.0. The impacted element is an unknown function of the file /admin/deletemanagerclinic.php. Performing manipulation of the argument clinic results in sql injection. The attack can be initiated remotely. The...

9.8CVSS7AI score0.00355EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/18 12:34 a.m.6 views

EUVD-2025-204012

A security flaw has been discovered in code-projects Online Appointment Booking System 1.0. The impacted element is an unknown function of the file /admin/deletemanagerclinic.php. Performing manipulation of the argument clinic results in sql injection. The attack can be initiated remotely. The...

7.5CVSS6.5AI score0.00355EPSS
SaveExploits0References6
NVD
NVD
added 2025/12/17 11:15 p.m.13 views

CVE-2025-14833

A security flaw has been discovered in code-projects Online Appointment Booking System 1.0. The impacted element is an unknown function of the file /admin/deletemanagerclinic.php. Performing manipulation of the argument clinic results in sql injection. The attack can be initiated remotely. The...

9.8CVSS0.00355EPSS
SaveExploits0References5
OSV
OSV
added 2025/12/17 11:15 p.m.11 views

CVE-2025-14833

A security flaw has been discovered in code-projects Online Appointment Booking System 1.0. The impacted element is an unknown function of the file /admin/deletemanagerclinic.php. Performing manipulation of the argument clinic results in sql injection. The attack can be initiated remotely. The...

9.8CVSS5.8AI score0.00355EPSS
SaveExploits0References5
CVE
CVE
added 2025/12/17 10:32 p.m.25 views

CVE-2025-14833

The CVE-2025-14833 entry concerns code-projects Online Appointment Booking System 1.0. A SQL injection vulnerability exists in the /admin/deletemanagerclinic.php file, originating from unsafely handling the clinic parameter. This flaw enables remote exploitation and has publicly available exploit...

9.8CVSS6.7AI score0.00355EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2025/12/17 10:32 p.m.31 views

CVE-2025-14833 code-projects Online Appointment Booking System deletemanagerclinic.php sql injection

A security flaw has been discovered in code-projects Online Appointment Booking System 1.0. The impacted element is an unknown function of the file /admin/deletemanagerclinic.php. Performing manipulation of the argument clinic results in sql injection. The attack can be initiated remotely. The...

7.5CVSS0.00355EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/12/17 10:32 p.m.3 views

CVE-2025-14833 code-projects Online Appointment Booking System deletemanagerclinic.php sql injection

A security flaw has been discovered in code-projects Online Appointment Booking System 1.0. The impacted element is an unknown function of the file /admin/deletemanagerclinic.php. Performing manipulation of the argument clinic results in sql injection. The attack can be initiated remotely. The...

7.5CVSS6.7AI score0.00355EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/12/17 12:00 a.m.9 views

Code-Projects Online Appointment Booking System SQL注入漏洞

Online Appointment Booking System is an online appointment booking system. Online Appointment Booking System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter clinic in the file...

9.8CVSS7.9AI score0.00355EPSS
SaveExploits0References6
GithubExploit
GithubExploit
added 2025/12/15 5:27 p.m.196 views

Exploit for Cross-site Scripting in Phpgurukul Doctor_Appointment_Management_System

CVE-2025-45805 Poc Of CVE-2025-45805 Affected Product: Doctor...

7.6CVSS6AI score0.00388EPSS
SaveExploits2
Patchstack
Patchstack
added 2025/12/15 1:30 p.m.9 views

WordPress Booking calendar, Appointment Booking System plugin <= 3.2.30 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Booking calendar, Appointment Booking System versions = 3.2.30...

5.3CVSS7AI score0.00249EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/12 1:06 a.m.9 views

CVE-2025-66918

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting XSS in admin/add-session.php via the "title" parameter...

8.8CVSS6.3AI score0.00552EPSS
SaveExploits1References1
Rows per page
Query Builder