1980 matches found
CVE-2025-3184
CVE-2025-3184 affects projectworlds Online Doctor Appointment Booking System 1.0. The vulnerability is a SQL injection in the /patient/profile.php endpoint (parameter patientFirstName, with patientId=1) caused by improper handling of input. The attack can be launched remotely and exploit details ...
CVE-2025-3182
A vulnerability, which was classified as critical, was found in projectworlds Online Doctor Appointment Booking System 1.0. This affects an unknown part of the file /patient/getschedule.php. The manipulation of the argument q leads to sql injection. It is possible to initiate the attack remotely...
CVE-2025-3183 projectworlds Online Doctor Appointment Booking System patientupdateprofile.php sql injection
A vulnerability has been found in projectworlds Online Doctor Appointment Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /patient/patientupdateprofile.php. The manipulation of the argument patientFirstName leads to sql injection. The attack can ...
CVE-2025-3183 projectworlds Online Doctor Appointment Booking System patientupdateprofile.php sql injection
A vulnerability has been found in projectworlds Online Doctor Appointment Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /patient/patientupdateprofile.php. The manipulation of the argument patientFirstName leads to sql injection. The attack can ...
CVE-2025-3182 projectworlds Online Doctor Appointment Booking System getschedule.php sql injection
A vulnerability, which was classified as critical, was found in projectworlds Online Doctor Appointment Booking System 1.0. This affects an unknown part of the file /patient/getschedule.php. The manipulation of the argument q leads to sql injection. It is possible to initiate the attack remotely...
CVE-2025-3182 projectworlds Online Doctor Appointment Booking System getschedule.php sql injection
A vulnerability, which was classified as critical, was found in projectworlds Online Doctor Appointment Booking System 1.0. This affects an unknown part of the file /patient/getschedule.php. The manipulation of the argument q leads to sql injection. It is possible to initiate the attack remotely...
CVE-2025-3182
The data shows CVE-2025-3182 affecting projectworlds Online Doctor Appointment Booking System 1.0, with a SQL injection in /patient/getschedule.php caused by manipulating the q parameter. The vulnerability can be exploited remotely and the exploit has been disclosed publicly. Multiple connected s...
CVE-2025-3181 projectworlds Online Doctor Appointment Booking System appointment.php sql injection
A vulnerability, which was classified as critical, has been found in projectworlds Online Doctor Appointment Booking System 1.0. Affected by this issue is some unknown functionality of the file /patient/appointment.php?scheduleDate=1&appid=1. The manipulation of the argument scheduleDate leads to...
CVE-2025-3181 projectworlds Online Doctor Appointment Booking System appointment.php sql injection
A vulnerability, which was classified as critical, has been found in projectworlds Online Doctor Appointment Booking System 1.0. Affected by this issue is some unknown functionality of the file /patient/appointment.php?scheduleDate=1&appid=1. The manipulation of the argument scheduleDate leads to...
CVE-2025-3181
CVE-2025-3181 affects the projectworlds Online Doctor Appointment Booking System 1.0. The vulnerability is in the file /patient/appointment.php with the scheduleDate parameter; manipulating scheduleDate leads to a SQL injection. It can be exploited remotely (no user interaction required). Multipl...
CVE-2025-31560
Incorrect Privilege Assignment vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Privilege Escalation.This issue affects Salon booking system: from n/a through 10.15...
CVE-2025-3180
A vulnerability classified as critical was found in projectworlds Online Doctor Appointment Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /doctor/deleteschedule.php. The manipulation of the argument ID leads to sql injection. The attack can be launched...
CVE-2025-3180
CVE-2025-3180 affects projectworlds Online Doctor Appointment Booking System 1.0. Affected is an unknown functionality of the file /doctor/deleteschedule.php, where manipulation of the ID parameter leads to SQL injection. The vulnerability can be triggered remotely and, per sources, the exploit h...
CVE-2025-3179 projectworlds Online Doctor Appointment Booking System deletepatient.php sql injection
A vulnerability classified as critical has been found in projectworlds Online Doctor Appointment Booking System 1.0. Affected is an unknown function of the file /doctor/deletepatient.php. The manipulation of the argument ic leads to sql injection. It is possible to launch the attack remotely. The...
CVE-2025-3178 projectworlds Online Doctor Appointment Booking System deleteappointment.php sql injection
A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /doctor/deleteappointment.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated...
CVE-2025-3178
CVE-2025-3178 affects projectworlds Online Doctor Appointment Booking System v1.0. A vulnerability in /doctor/deleteappointment.php allows manipulation of the ID parameter, leading to SQL injection. Exploitation may be remote and has been publicly disclosed. Multiple sources (Red Hat, NVD, CVELIS...
CVE-2025-31541
Missing Authorization vulnerability in TuriTop TuriTop Booking System turitop-booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TuriTop Booking System: from n/a through = 1.0.10...
CVE-2025-31541 WordPress TuriTop Booking System plugin <= 1.0.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in turitop TuriTop Booking System allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects TuriTop Booking System: from n/a through 1.0.10...
CVE-2025-31541 WordPress TuriTop Booking System plugin <= 1.0.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in TuriTop TuriTop Booking System turitop-booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TuriTop Booking System: from n/a through = 1.0.10...