478 matches found
SourceCodester Doctors Appointment System SQL注入漏洞
SourceCodester Doctor Appointment System is an application from SourceCodester USA. It provides an appointment scheduling feature. A SQL injection vulnerability exists in the SourceCodester Doctors Appointment System version 1.0, which originates from a security issue with an unknown function in...
PT-2023-11774 · Unknown · Projectworlds Online Doctor Appointment Booking System
Name of the Vulnerable Software and Affected Versions: Projectworlds Online Doctor Appointment Booking System affected versions not specified Description: The issue allows attackers to gain sensitive information via the "getuser.php" endpoint, specifically through the q parameter. This is a SQL...
CVE-2020-29168
The CVE-2020-29168 entry describes a SQL Injection in the Projectworlds Online Doctor Appointment Booking System. Affected component: the getuser.php endpoint, where user input in the q parameter is not properly sanitized. Impact is high (CVE metrics: Confidentiality/Integrity/Availability all Hi...
Online Doctor Appointment Booking System SQL注入漏洞
Online Doctor Appointment Booking System is an open source online doctor appointment booking system. The Online Doctor Appointment Booking System suffers from a SQL injection vulnerability that originates from allowing an attacker to obtain sensitive information via the q parameter of the...
CVE-2020-29168: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Projectworlds Online Doctor Appointment Booking System, allows attackers to gain sensitive information via the q parameter to the getuser.php endpoint...
Cross site scripting
phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting XSS via searchdata=...
CVE-2022-46128
phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting XSS via searchdata=...
CVE-2022-46128
phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting XSS via searchdata=...
CVE-2022-45730
A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function...
CVE-2022-45730
A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function...
Cross site scripting
A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function...
Doctor Appointment Management System 跨站脚本漏洞
Doctor Appointment Management System is a Doctor Appointment Management System by the individual developer ANUJ KUMAR. A security vulnerability exists in Doctor Appointment Management System version v1.0.0, which originates from cross-site scripting XSS and allows an attacker to execute arbitrary...
Doctor Appointment Management System 跨站脚本漏洞
Doctor Appointment Management System is a Doctor Appointment Management System by the individual developer ANUJ KUMAR. A security vulnerability exists in Doctor Appointment Management System v1.0.0, which originates from the presence of cross-site scripting XSS...
PT-2023-14740 · Unknown · Doctor Appointment Management System
Name of the Vulnerable Software and Affected Versions: Doctor Appointment Management System version 1.0.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function. Recommendations: For Doctor...
CVE-2022-46128
Affected software: phpgurukul Doctor Appointment Management System v1.0.0. Vulnerability: Cross-Site Scripting (XSS) via the searchdata parameter. Underlying details: CVSS v3.1 base score 6.1 (MEDIUM); attack vector: network; attack complexity: low; privileges required: none; user interaction req...
CVE-2022-46128
phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting XSS via searchdata=...
CVE-2022-45730
A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function...
CVE-2022-46128: Improper Neutralization of Input During Web Page Generation
phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting XSS via searchdata=...
CVE-2022-45730
A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function...
CVE-2022-45730
CVE-2022-45730 is an XSS vulnerability in Doctor Appointment Management System v1.0.0, where a crafted payload injected into the Search function can execute arbitrary scripts/HTML. Concrete details across sources confirm the affected software and the input point (Search). Some reports (PT-2023-14...