PT-2026-90587

The Rox Appointment Booking WordPress plugin before 1.2.0 does not verify the order total or the selected payment method against its own server-side pricing when creating a booking, allowing unauthenticated attackers to create confirmed bookings at an arbitrary price and to bypass the site's...

PT-2026-90588

The Rox Appointment Booking WordPress plugin before 1.2.3 does not perform any authorization check on the endpoint that returns a booking's confirmation details, and each booking is addressed by a sequential numeric identifier, allowing unauthenticated attackers to read any customer's name, email...

CVE-2026-85403

A flaw has been found in code-projects Doctor Appointment System 1.0. This issue affects some unknown processing of the file /contactus.php. This manipulation of the argument firstname causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be...

CVE-2026-85402

A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the argument docid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-85403 code-projects Doctor Appointment System contactus.php sql injection

A flaw has been found in code-projects Doctor Appointment System 1.0. This issue affects some unknown processing of the file /contactus.php. This manipulation of the argument firstname causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be...

EUVD-2026-70874

A flaw has been found in code-projects Doctor Appointment System 1.0. This issue affects some unknown processing of the file /contactus.php. This manipulation of the argument firstname causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be...

CVE-2026-85403

A SQL injection vulnerability exists in code-projects Doctor Appointment System 1.0 via the firstname argument in /contactus.php. The flaw allows remote exploitation with no required privileges or user interaction, rated CVSS 3.1: 7.3 (HIGH) . The exploit has been published with proof-of-concept ...

CVE-2026-85403 code-projects Doctor Appointment System contactus.php sql injection

A flaw has been found in code-projects Doctor Appointment System 1.0. This issue affects some unknown processing of the file /contactus.php. This manipulation of the argument firstname causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be...

CVE-2026-85402 code-projects Doctor Appointment System booking.php sql injection

A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the argument docid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-85402 code-projects Doctor Appointment System booking.php sql injection

A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the argument docid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

EUVD-2026-70873

A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the argument docid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-85402

A SQL injection vulnerability exists in the code-projects Doctor Appointment System 1.0 , specifically in the file /patient/booking.php . The root cause is the unsanitized manipulation of the doc_id argument, allowing a remote attacker to inject SQL commands without requiring authentication or us...

EUVD-2026-70820

A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patientlogin.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be...

PT-2026-85390

A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the argument doc id results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

PT-2026-85391

A flaw has been found in code-projects Doctor Appointment System 1.0. This issue affects some unknown processing of the file /contactus.php. This manipulation of the argument firstname causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be...

CVE-2026-85225

A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patientlogin.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be...

CVE-2026-85225 code-projects Doctor Appointment System patient_login.php sql injection

A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patientlogin.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be...

CVE-2026-85225

code-projects Doctor Appointment System 1.0 is affected by a SQL injection vulnerability in the file /patient_login.php , triggered by manipulation of the email argument. The attack is remote and requires no authentication , with a CVSS 3.1 base score of 7.3 (HIGH) . The public proof-of-concept o...

CVE-2026-85225 code-projects Doctor Appointment System patient_login.php sql injection

A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patientlogin.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be...

PT-2026-85271

A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might b...