Lucene search
K

7 matches found

OSV
OSV
added 2023/11/30 2:15 p.m.5 views

CVE-2023-6425

A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /clinic/medicalrecordsview.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacki...

5.4CVSS5.7AI score0.00395EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2023/11/30 2:15 p.m.3 views

CVE-2023-6425

A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /clinic/medicalrecordsview.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacki...

6.3CVSS5.3AI score0.00395EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2023/11/30 2:15 p.m.2 views

CVE-2023-6422

A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /clinic/patientsview.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking use...

5.4CVSS5.7AI score0.00388EPSS
Exploits0References1
OSV
OSV
added 2023/11/30 2:15 p.m.5 views

CVE-2023-6423

A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /clinic/eventsview.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking user ...

5.4CVSS5.7AI score0.00388EPSS
Exploits0References1
Prion
Prion
added 2023/11/30 2:15 p.m.18 views

Design/Logic Flaw

A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /clinic/medicalrecordsview.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacki...

4.9CVSS6.2AI score0.00395EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/11/30 12:0 a.m.4 views

BigProf Online Clinic Management System Cross-Site Scripting Vulnerability

BigProf Online Clinic Management System is an online clinic management system from BigProf, Inc. A cross-site scripting vulnerability exists in BigProf Online Clinic Management System version 2.2, which stems from a cross-site scripting vulnerability in the FirstRecord parameter in...

6.3CVSS6.2AI score0.00395EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/11/30 12:0 a.m.3 views

BigProf Online Clinic Management System Cross-Site Scripting Vulnerability

BigProf Online Clinic Management System is an online clinic management system from BigProf, Inc. A cross-site scripting vulnerability exists in BigProf Online Clinic Management System version 2.2, which stems from a cross-site scripting vulnerability in the FirstRecord parameter of...

6.3CVSS6.2AI score0.00388EPSS
Exploits0References1
Rows per page
Query Builder