944 matches found
CVE-2022-43226: Improper Neutralization of Special Elements used in an SQL Command
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/?page=appointments/viewappointment...
Online Diagnostic Lab Management System SQL注ε ₯ζΌζ΄
Online Diagnostic Lab Management System is an online diagnostic lab management system. Online Diagnostic Lab Management System v1.0 has a SQL injection vulnerability, which can be exploited to perform SQL injection via the id parameter of /odlms/admin/?page=appointments/viewappointment...
Online Diagnostic Lab Management System SQL注ε ₯ζΌζ΄
Online Diagnostic Lab Management System is an online diagnostic lab management system. A SQL injection vulnerability exists in Online Diagnostic Lab Management System v1.0, which can be exploited by an attacker to perform SQL injection via the id parameter of...
CVE-2022-43125
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/manageappointment.php...
Sql injection
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/updatestatus.php...
Sql injection
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/manageappointment.php...
CVE-2022-43125
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/manageappointment.php...
CVE-2022-43127: Improper Neutralization of Special Elements used in an SQL Command
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/updatestatus.php...
CVE-2022-43125: Improper Neutralization of Special Elements used in an SQL Command
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/manageappointment.php...
Joomla Vik Appointments 1.7.3 Cross Site Scripting
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ ββ C r a C k E r ββ ββ T H E C R A C K O F E T E R N A L M I G H T ββ ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ βββββ From The Ashes and Dust Rises An...
CVE-2022-2374
The Simply Schedule Appointments WordPress plugin before 1.5.7.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite se...
CVE-2022-2373
The Simply Schedule Appointments WordPress plugin before 1.5.7.7 is missing authorisation in a REST endpoint, allowing unauthenticated users to retrieve WordPress users details such as name and email address...
CVE-2022-2373
The Simply Schedule Appointments WordPress plugin before 1.5.7.7 is missing authorisation in a REST endpoint, allowing unauthenticated users to retrieve WordPress users details such as name and email address...
CVE-2022-2373
The Simply Schedule Appointments WordPress plugin before 1.5.7.7 is missing authorisation in a REST endpoint, allowing unauthenticated users to retrieve WordPress users details such as name and email address...
Cross site scripting
The Simply Schedule Appointments WordPress plugin before 1.5.7.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite se...
Authentication flaw
The Simply Schedule Appointments WordPress plugin before 1.5.7.7 is missing authorisation in a REST endpoint, allowing unauthenticated users to retrieve WordPress users details such as name and email address...
CVE-2022-2374 Simply Schedule Appointments < 1.5.7.7 - Admin+ Stored Cross-Site Scripting
The Simply Schedule Appointments WordPress plugin before 1.5.7.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite se...
CVE-2022-2374
The CVE-2022-2374 entry concerns the WordPress plugin Simply Schedule Appointments (pre-1.5.7.7). The vulnerability arises because some plugin settings are not properly sanitised/escaped, enabling Stored Cross-Site Scripting (XSS) by high-privilege users (e.g., admins), even if unfiltered_html is...
CVE-2022-2373 Simply Schedule Appointments < 1.5.7.7 - Unauthenticated Email Address Disclosure
The Simply Schedule Appointments WordPress plugin before 1.5.7.7 is missing authorisation in a REST endpoint, allowing unauthenticated users to retrieve WordPress users details such as name and email address...
CVE-2022-2373
The CVE-2022-2373 entry concerns the WordPress plugin Simply Schedule Appointments (before 1.5.7.7). The issue is missing authorization in a REST endpoint, enabling unauthenticated access to WordPress user details (name and email). Impact is information disclosure; base CVSS 3.1 score is 5.3 (MED...