Lucene search
+L

478 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/04 12:00 a.m.•2 views

CVE-2021-27314: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page...

9.8CVSS5.8AI score0.12394EPSS
SaveExploits3References2
CNNVD
CNNVD
•added 2021/03/03 12:00 a.m.•16 views

Sourcecodesterk Doctor Appointment System SQL注入漏洞

Doctor Appointment System is a PHP/MySQLi based doctor appointment system. A SQL blind injection vulnerability exists in contactus.php in Doctor Appointment System 1.0. An attacker can exploit this vulnerability to insert malicious SQL queries via the firstname parameter...

7.5CVSS5.9AI score0.09299EPSS
SaveExploits3References4
CNNVD
CNNVD
•added 2021/03/03 12:00 a.m.•16 views

Sourcecodesterk Doctor Appointment System SQL注入漏洞

Doctor Appointment System is a PHP/MySQLi based doctor appointment system. A SQL injection vulnerability exists in admin.php in Doctor Appointment System 1.0, which can be exploited to insert a malicious SQL query via the username parameter on the login page...

9.8CVSS5.9AI score0.12394EPSS
SaveExploits3References2
CNNVD
CNNVD
•added 2021/03/03 12:00 a.m.•13 views

Sourcecodesterk Doctor Appointment System SQL注入漏洞

Sourcecodesterk Doctor Appointment System is a Sourcecodesterk open source application. It provides an appointment scheduling feature. Doctor Appointment System version 1.0 suffers from an SQL injection vulnerability that originates from a remote blind SQL injection vulnerability in the name and...

7.5CVSS8.1AI score0.07826EPSS
SaveExploits3References2
CNNVD
CNNVD
•added 2021/03/03 12:00 a.m.•17 views

Sourcecodesterk Doctor Appointment System SQL注入漏洞

Doctor Appointment System is a PHP/MySQLi based doctor appointment system. A SQL blind injection vulnerability exists in contactus.php in Doctor Appointment System 1.0. The vulnerability can be exploited to insert malicious SQL queries via email parameters...

7.5CVSS5.9AI score0.07826EPSS
SaveExploits3References2
CNNVD
CNNVD
•added 2021/03/03 12:00 a.m.•16 views

Sourcecodesterk Doctor Appointment System SQL注入漏洞

Sourcecodesterk Doctor Appointment System is a Sourcecodesterk open source application. Provides an appointment function . Doctor Appointment System version 1.0 suffers from an SQL injection vulnerability that originates from a remote blind SQL injection vulnerability in the name and email...

7.5CVSS5.9AI score0.07826EPSS
SaveExploits3References2
CNVD
CNVD
•added 2021/03/02 12:00 a.m.•29 views

Sourcecodesterk Doctor Appointment System Cross-Site Scripting Vulnerability

Sourcecodesterk Doctor Appointment System is a Sourcecodesterk open source application. Provides an appointment function . A cross-site scripting vulnerability exists in contactus.php in Sourcecodesterk Doctor Appointment System 1.0, which can be exploited by remote attackers to inject arbitrary...

6.1CVSS6AI score0.01313EPSS
SaveExploits3References1
OSV
OSV
•added 2021/03/01 9:15 p.m.•12 views

CVE-2021-27317

Cross Site Scripting XSS vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to inject arbitrary web script or HTML via the comment parameter...

6.1CVSS6.5AI score0.01313EPSS
SaveExploits3References2
OSV
OSV
•added 2021/03/01 9:15 p.m.•15 views

CVE-2021-27318

Cross Site Scripting XSS vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to inject arbitrary web script or HTML via the lastname parameter...

6.1CVSS6.5AI score0.01487EPSS
SaveExploits3References2
NVD
NVD
•added 2021/03/01 9:15 p.m.•23 views

CVE-2021-27318

Cross Site Scripting XSS vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to inject arbitrary web script or HTML via the lastname parameter...

6.1CVSS0.01487EPSS
SaveExploits3References2
attackerkb
attackerkb
•added 2021/03/01 9:15 p.m.•7 views

CVE-2021-27317

Cross Site Scripting XSS vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to inject arbitrary web script or HTML via the comment parameter...

6.1CVSS5.4AI score0.01313EPSS
SaveExploits3References3
Prion
Prion
•added 2021/03/01 9:15 p.m.•23 views

Cross site scripting

Cross Site Scripting XSS vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to inject arbitrary web script or HTML via the comment parameter...

4.3CVSS6AI score0.01313EPSS
SaveExploits3References2Affected Software1
Prion
Prion
•added 2021/03/01 9:15 p.m.•25 views

Cross site scripting

Cross Site Scripting XSS vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to inject arbitrary web script or HTML via the lastname parameter...

4.3CVSS6AI score0.01487EPSS
SaveExploits3References2Affected Software1
Cvelist
Cvelist
•added 2021/03/01 8:16 p.m.•40 views

CVE-2021-27317

Cross Site Scripting XSS vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to inject arbitrary web script or HTML via the comment parameter...

6.1AI score0.01313EPSS
SaveExploits3References2
CVE
CVE
•added 2021/03/01 8:16 p.m.•73 views

CVE-2021-27317

CVE-2021-27317 is a documented Cross Site Scripting (XSS) vulnerability in the Doctor Appointment System 1.0, specifically in the file contactus.php . The vulnerability allows remote attackers to inject arbitrary web script or HTML via the comment parameter. Public sources note that the issue ari...

6.1CVSS5.9AI score0.01313EPSS
SaveExploits3References2Affected Software1
Cvelist
Cvelist
•added 2021/03/01 8:14 p.m.•34 views

CVE-2021-27318

Cross Site Scripting XSS vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to inject arbitrary web script or HTML via the lastname parameter...

6.1AI score0.01487EPSS
SaveExploits3References2
CVE
CVE
•added 2021/03/01 8:14 p.m.•84 views

CVE-2021-27318

CVE-2021-27318 is an XSS in Doctor Appointment System 1.0, affecting contactus.php where the lastname parameter can inject arbitrary script/HTML. Documents confirm the vulnerability but do not provide remediation details or patch/version fixes.

6.1CVSS5.9AI score0.01487EPSS
SaveExploits3References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/01 12:00 a.m.•2 views

CVE-2021-27317: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to inject arbitrary web script or HTML via the comment parameter...

6.1CVSS6AI score0.01313EPSS
SaveExploits3References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/01 12:00 a.m.•4 views

CVE-2021-27318: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to inject arbitrary web script or HTML via the lastname parameter...

6.1CVSS6AI score0.01487EPSS
SaveExploits3References2
CNNVD
CNNVD
•added 2021/02/26 12:00 a.m.•17 views

Doctor Appointment System version 跨站脚本漏洞

Sourcecodesterk Doctor Appointment System is a Sourcecodesterk open source application. Provides an appointment function . A cross-site scripting vulnerability exists in contactus.php in Sourcecodesterk Doctor Appointment System 1.0, which can be exploited by remote attackers to inject arbitrary...

6.1CVSS6.4AI score0.01313EPSS
SaveExploits3References4
Rows per page
Query Builder