Lucene search
+L

478 matches found

CNNVD
CNNVD
•added 2023/02/27 12:00 a.m.•15 views

SourceCodester Doctors Appointment System SQL注入漏洞

SourceCodester Doctor Appointment System is an application from SourceCodester USA. It provides an appointment scheduling feature. A SQL injection vulnerability exists in the SourceCodester Doctors Appointment System version 1.0, which originates from a security issue with an unknown function in...

8.8CVSS7AI score0.007EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/02/17 12:00 a.m.•17 views

PT-2023-11774 · Unknown · Projectworlds Online Doctor Appointment Booking System

Name of the Vulnerable Software and Affected Versions: Projectworlds Online Doctor Appointment Booking System affected versions not specified Description: The issue allows attackers to gain sensitive information via the "getuser.php" endpoint, specifically through the q parameter. This is a SQL...

9.8CVSS9.7AI score0.01244EPSS
SaveExploits1References5
CVE
CVE
•added 2023/02/17 12:00 a.m.•75 views

CVE-2020-29168

The CVE-2020-29168 entry describes a SQL Injection in the Projectworlds Online Doctor Appointment Booking System. Affected component: the getuser.php endpoint, where user input in the q parameter is not properly sanitized. Impact is high (CVE metrics: Confidentiality/Integrity/Availability all Hi...

9.8CVSS9.7AI score0.01244EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2023/02/17 12:00 a.m.•15 views

Online Doctor Appointment Booking System SQL注入漏洞

Online Doctor Appointment Booking System is an open source online doctor appointment booking system. The Online Doctor Appointment Booking System suffers from a SQL injection vulnerability that originates from allowing an attacker to obtain sensitive information via the q parameter of the...

9.8CVSS8.6AI score0.01244EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/17 12:00 a.m.•3 views

CVE-2020-29168: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Projectworlds Online Doctor Appointment Booking System, allows attackers to gain sensitive information via the q parameter to the getuser.php endpoint...

9.8CVSS5.9AI score0.01244EPSS
SaveExploits1References3
Prion
Prion
•added 2023/01/26 9:18 p.m.•30 views

Cross site scripting

phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting XSS via searchdata=...

5.8CVSS6AI score0.00478EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2023/01/26 9:18 p.m.•14 views

CVE-2022-46128

phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting XSS via searchdata=...

6.1CVSS5.8AI score0.00478EPSS
SaveExploits0References2
NVD
NVD
•added 2023/01/26 9:18 p.m.•38 views

CVE-2022-46128

phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting XSS via searchdata=...

6.1CVSS6AI score0.00478EPSS
SaveExploits0References2
OSV
OSV
•added 2023/01/26 9:17 p.m.•15 views

CVE-2022-45730

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function...

6.1CVSS5.9AI score0.00518EPSS
SaveExploits0References2
NVD
NVD
•added 2023/01/26 9:17 p.m.•25 views

CVE-2022-45730

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function...

6.1CVSS5.9AI score0.00518EPSS
SaveExploits0References2
Prion
Prion
•added 2023/01/26 9:17 p.m.•28 views

Cross site scripting

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function...

5.8CVSS5.9AI score0.00518EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2023/01/26 12:00 a.m.•12 views

Doctor Appointment Management System 跨站脚本漏洞

Doctor Appointment Management System is a Doctor Appointment Management System by the individual developer ANUJ KUMAR. A security vulnerability exists in Doctor Appointment Management System version v1.0.0, which originates from cross-site scripting XSS and allows an attacker to execute arbitrary...

6.1CVSS6.3AI score0.00518EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/01/26 12:00 a.m.•31 views

Doctor Appointment Management System 跨站脚本漏洞

Doctor Appointment Management System is a Doctor Appointment Management System by the individual developer ANUJ KUMAR. A security vulnerability exists in Doctor Appointment Management System v1.0.0, which originates from the presence of cross-site scripting XSS...

6.1CVSS5.9AI score0.00478EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/01/25 12:00 a.m.•15 views

PT-2023-14740 · Unknown · Doctor Appointment Management System

Name of the Vulnerable Software and Affected Versions: Doctor Appointment Management System version 1.0.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function. Recommendations: For Doctor...

6.1CVSS6.3AI score0.00518EPSS
SaveExploits0References4
CVE
CVE
•added 2023/01/25 12:00 a.m.•64 views

CVE-2022-46128

Affected software: phpgurukul Doctor Appointment Management System v1.0.0. Vulnerability: Cross-Site Scripting (XSS) via the searchdata parameter. Underlying details: CVSS v3.1 base score 6.1 (MEDIUM); attack vector: network; attack complexity: low; privileges required: none; user interaction req...

6.1CVSS6AI score0.00478EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/01/25 12:00 a.m.•12 views

CVE-2022-46128

phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting XSS via searchdata=...

6.2AI score0.00478EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/01/25 12:00 a.m.•38 views

CVE-2022-45730

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function...

6AI score0.00518EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/25 12:00 a.m.•6 views

CVE-2022-46128: Improper Neutralization of Input During Web Page Generation

phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting XSS via searchdata=...

6.1CVSS5.7AI score0.00478EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/01/25 12:00 a.m.•9 views

CVE-2022-45730

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function...

5.9AI score0.00518EPSS
SaveExploits0References2
CVE
CVE
•added 2023/01/25 12:00 a.m.•57 views

CVE-2022-45730

CVE-2022-45730 is an XSS vulnerability in Doctor Appointment Management System v1.0.0, where a crafted payload injected into the Search function can execute arbitrary scripts/HTML. Concrete details across sources confirm the affected software and the input point (Search). Some reports (PT-2023-14...

6.1CVSS5.8AI score0.00518EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder