Lucene search
+L

511 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•5 views

CVE-2025-27263: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Creativeitem Doctor Appointment Booking doctor-appointment-booking allows SQL Injection.This issue affects Doctor Appointment Booking: from n/a through = 1.0.0...

8.5CVSS5.8AI score0.00471EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•4 views

CVE-2025-27264: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Creativeitem Doctor Appointment Booking doctor-appointment-booking allows PHP Local File Inclusion.This issue affects Doctor Appointment Booking: from n/a through = 1.0.0...

7.5CVSS5.8AI score0.00829EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/02/21 12:00 a.m.•18 views

WordPress Doctor Appointment Booking Plugin <= 1.0.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Phat RiO - Fore-Z co.ltd in WordPress Plugin Doctor Appointment Booking versions = 1.0.0...

7.5CVSS7AI score0.00829EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/02/21 12:00 a.m.•21 views

WordPress Doctor Appointment Booking Plugin <= 1.0.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Phat RiO - Fore-Z co.ltd in WordPress Plugin Doctor Appointment Booking versions = 1.0.0...

8.5CVSS8.1AI score0.00471EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2024/12/09 5:15 p.m.•11 views

CVE-2022-38946

Arbitrary File Upload vulnerability in Doctor-Appointment version 1.0 in /Frontend/signupcom.php, allows attackers to execute arbitrary code...

9.8CVSS6AI score0.00788EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2024/12/09 5:15 p.m.•14 views

CVE-2022-38946

Arbitrary File Upload vulnerability in Doctor-Appointment version 1.0 in /Frontend/signupcom.php, allows attackers to execute arbitrary code...

9.8CVSS6AI score0.00788EPSS
SaveExploits1References2
NVD
NVD
•added 2024/12/09 5:15 p.m.•30 views

CVE-2022-38946

Arbitrary File Upload vulnerability in Doctor-Appointment version 1.0 in /Frontend/signupcom.php, allows attackers to execute arbitrary code...

9.8CVSS0.00788EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/12/09 12:00 a.m.•11 views

CVE-2022-38946

Arbitrary File Upload vulnerability in Doctor-Appointment version 1.0 in /Frontend/signupcom.php, allows attackers to execute arbitrary code...

9.8AI score0.00788EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•6 views

CVE-2022-38946: Improper Control of Generation of Code

Arbitrary File Upload vulnerability in Doctor-Appointment version 1.0 in /Frontend/signupcom.php, allows attackers to execute arbitrary code...

9.8CVSS6.5AI score0.00788EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•16 views

Doctor-Appointment 安全漏洞

Doctor-Appointment is a doctor's appointment system by Divyanshu Sharma Personal Developer. A security vulnerability exists in Doctor-Appointment version 1.0, which stems from /Frontend/signupcom.php containing an arbitrary file upload vulnerability...

9.8CVSS7AI score0.00788EPSS
SaveExploits1References1
CVE
CVE
•added 2024/12/09 12:00 a.m.•67 views

CVE-2022-38946

The Doctor-Appointment version 1.0 software is susceptible to an Arbitrary File Upload vulnerability within the /Frontend/signup_com.php endpoint. This security flaw allows an attacker to upload malicious files, which can lead to arbitrary code execution on the system. To mitigate this risk, it i...

9.8CVSS6.7AI score0.00788EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2024/12/09 12:00 a.m.•31 views

CVE-2022-38946

Arbitrary File Upload vulnerability in Doctor-Appointment version 1.0 in /Frontend/signupcom.php, allows attackers to execute arbitrary code...

0.00788EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/09 12:00 a.m.•17 views

PT-2024-11616 · Unknown · Doctor-Appointment

Name of the Vulnerable Software and Affected Versions: Doctor-Appointment version 1.0 Description: The issue allows attackers to execute arbitrary code due to an arbitrary file upload vulnerability in the /Frontend/signup com.php endpoint. This vulnerability enables attackers to upload malicious...

9.8CVSS7.5AI score0.00788EPSS
SaveExploits1References6
OSV
OSV
•added 2024/11/08 4:15 a.m.•16 views

CVE-2024-10987

A vulnerability was found in code-projects E-Health Care System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Doctor/userappointment.php. The manipulation of the argument scheduleid/scheduledate/scheduleday/starttime/endtime/booking...

6.5CVSS5.8AI score0.00435EPSS
SaveExploits1References5
CNVD
CNVD
•added 2024/11/01 12:00 a.m.•13 views

Doctor Appointment Management System Cross-Site Scripting Vulnerability (CNVD-2025-21427)

Doctor Appointment Management System is a doctor appointment management system. Doctor Appointment Management System suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an...

5.4CVSS6AI score0.00281EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/30 9:15 p.m.•15 views

CVE-2024-48807

Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter...

5.4CVSS6.1AI score0.00281EPSS
SaveExploits0References2
NVD
NVD
•added 2024/10/30 9:15 p.m.•35 views

CVE-2024-48807

Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter...

5.4CVSS0.00281EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/10/30 12:00 a.m.•8 views

PT-2024-33234

Name of the Vulnerable Software and Affected Versions PHPGurukul Doctor Appointment Management System version 1.0 Description The issue allows a local attacker to execute arbitrary code via the search parameter. This can lead to the execution of malicious scripts, potentially compromising the...

5.4CVSS6.5AI score0.00281EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2024/10/30 12:00 a.m.•14 views

PHPGurukul Doctor Appointment Management System 安全漏洞

Doctor Appointment Management System is a doctor appointment management system. Doctor Appointment Management System suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an...

5.4CVSS6AI score0.00281EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/30 12:00 a.m.•4 views

CVE-2024-48807: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter...

5.4CVSS6.5AI score0.00281EPSS
SaveExploits0References1
Rows per page
Query Builder