CVE-2024-4293

The CVE-2024-4293 entry concerns PHPGurukul Doctor Appointment Management System 1.0. The vulnerability is in the file appointment-bwdates-reports-details.php, where unsanitized inputs fromfromdate and todate enable cross-site scripting (XSS). This is described as a remote attack with a publicly ...

CVE-2024-4293 PHPGurukul Doctor Appointment Management System appointment-bwdates-reports-details.php cross site scripting

A vulnerability classified as problematic was found in PHPGurukul Doctor Appointment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file appointment-bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to cross site scriptin...

CVE-2024-4293: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in PHPGurukul Doctor Appointment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file appointment-bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to cross site scriptin...

CVE-2024-4294: Improper Control of Resource Identifiers

A vulnerability, which was classified as critical, has been found in PHPGurukul Doctor Appointment Management System 1.0. Affected by this issue is some unknown functionality of the file /doctor/view-appointment-detail.php. The manipulation of the argument editid leads to improper control of...

Doctor Appointment Management System 跨站脚本漏洞

Doctor Appointment Management System is a doctor appointment management system by the individual developer ANUJ KUMAR. A cross-site scripting vulnerability exists in Doctor Appointment Management System version 1.0, which stems from the parameter fromdate/todate in the file...

Doctor Appointment Management System 安全漏洞

Doctor Appointment Management System is a doctor appointment management system by the individual developer ANUJ KUMAR. A security vulnerability exists in Doctor Appointment Management System version 1.0, which stems from the parameter editid in the file /doctor/view-appointment-detail.php that...

CVE-2023-40945

Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php...

CVE-2023-40945

Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php...

CVE-2023-40945

Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php...

Sql injection

Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php...

CVE-2023-40945: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php...

PT-2023-27713 · Sourcecodester · Sourcecodester Doctors Appointment System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Doctor Appointment System version 1.0 Description: The issue concerns SQL Injection in the userid variable at the doctorsmyDetails.php endpoint. This allows for potential manipulation of database queries. Recommendations: For...

Doctor Appointment System SQL Injection Vulnerability

Doctor Appointment System is a doctor appointment system by Hashen Udara Personal Developer. A security vulnerability exists in Doctor Appointment System version 1.0, which was discovered to contain an SQL injection vulnerability via the variable $userid in doctormyDetails.php...

CVE-2023-40945

Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the $userid parameter of doctors\myDetails.php. The affected component is the application’s user detail retrieval, enabling manipulation of database queries (root cause: improper handling of user-supplied input leading...

CVE-2023-40945

Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php...

SourceCodester Doctor Appointment System SQL注入漏洞

SourceCodester Doctor Appointment System is an application from SourceCodester USA. It provides an appointment scheduling feature. A SQL injection vulnerability exists in SourceCodester Doctor Appointment System v1.0, which stems from a SQL injection vulnerability in the $userid parameter of...

CVE-2023-1057

A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been rated as critical. Affected by this issue is the function edoc of the file login.php. The manipulation of the argument usermail leads to sql injection. VDB-221822 is the identifier assigned to this vulnerabili...

SourceCodester Doctors Appointment System SQL注入漏洞

SourceCodester Doctor Appointment System is an application from SourceCodester USA. It provides an appointment scheduling feature. A SQL injection vulnerability exists in the SourceCodester Doctors Appointment System version 1.0, which originates from an unknown function in the file...

Doctors Appointment System SQL注入漏洞

SourceCodester Doctor Appointment System is an application from SourceCodester USA. It provides an appointment scheduling feature. A SQL injection vulnerability exists in SourceCodester Doctors Appointment System version 1.0, which originates from a security issue in the file create-account.php...

SourceCodester Doctor Appointment System SQL注入漏洞

SourceCodester Doctor Appointment System is an application from SourceCodester USA. It provides an appointment scheduling feature. A SQL injection vulnerability exists in SourceCodester Doctors Appointment System version 1.0, which originates from an unknown function in the file /admin/edit-doc.p...