Lucene search
+L

478 matches found

CNNVD
CNNVD
•added 2021/02/26 12:00 a.m.•19 views

Sourcecodesterk Doctor Appointment System 跨站脚本漏洞

Sourcecodester Doctor Appointment System is a Sourcecodesterk open source application. Provides an appointment function . Sourcecodester Doctor Appointment System version 1.0 suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client data in the WEB...

6.1CVSS6.3AI score0.01487EPSS
SaveExploits3References4
NVD
NVD
•added 2021/02/18 4:15 a.m.•39 views

CVE-2021-27124

SQL injection in the expertise parameter in searchresult.php in Doctor Appointment System v1.0 allows an authenticated patient user to dump the database credentials via a SQL injection attack...

6.5CVSS0.05831EPSS
SaveExploits1References3
OSV
OSV
•added 2021/02/18 4:15 a.m.•17 views

CVE-2021-27124

SQL injection in the expertise parameter in searchresult.php in Doctor Appointment System v1.0 allows an authenticated patient user to dump the database credentials via a SQL injection attack...

6.5CVSS6.7AI score0.05831EPSS
SaveExploits1References3
Prion
Prion
•added 2021/02/18 4:15 a.m.•35 views

Sql injection

SQL injection in the expertise parameter in searchresult.php in Doctor Appointment System v1.0 allows an authenticated patient user to dump the database credentials via a SQL injection attack...

4CVSS6.6AI score0.05831EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2021/02/18 3:06 a.m.•124 views

CVE-2021-27124

Doctor Appointment System 1.0 is affected by an SQL injection in the expertise parameter of search_result.php. The vulnerability arises from insufficient input validation, allowing an authenticated patient user to execute arbitrary SQL and dump database credentials, implying potential data leakag...

6.5CVSS6.6AI score0.05831EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/18 12:00 a.m.•4 views

CVE-2021-27124: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in the expertise parameter in searchresult.php in Doctor Appointment System v1.0 allows an authenticated patient user to dump the database credentials via a SQL injection attack...

6.5CVSS5.8AI score0.05831EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/02/09 12:00 a.m.•18 views

Doctor Appointment System SQL注入漏洞

Sourcecodesterk Doctor Appointment System is an open source application from Sourcecodesterk. Provides an appointment function. Sourcecodesterk Doctor Appointment System version 1.0 contains a SQL injection vulnerability, which stems from the program does not adequately filter the searchresult.ph...

6.5CVSS6.7AI score0.05831EPSS
SaveExploits1References5
Exploit DB
Exploit DB
•added 2021/01/08 12:00 a.m.•261 views

Online Doctor Appointment System 1.0 - 'Multiple' Stored XSS

Exploit Title: Online Doctor Appointment System 1.0 - 'Multiple' Stored XSS Tested on: Windows 10 Exploit Author: Mohamed habib Smidi Craniums Date: 2021-01-08 Vendor Homepage: https://www.sourcecodester.com/php/14663/online-doctor-appointment-system-php-full-source-code.html Software Link:...

5.4CVSS5.6AI score0.02535EPSS
SaveExploits3
Packet Storm
Packet Storm
•added 2021/01/08 12:00 a.m.•179 views

Online Doctor Appointment System 1.0 Cross Site Scripting

Exploit Title: Online Doctor Appointment System 1.0 - Multiple Stored XSS Tested on: Windows 10 Exploit Author: Mohamed habib Smidi Craniums Date: 2021-01-08 Vendor Homepage: https://www.sourcecodester.com/php/14663/online-doctor-appointment-system-php-full-source-code.html Software Link:...

7.4AI score
SaveExploits0
NVD
NVD
•added 2020/12/02 10:15 p.m.•29 views

CVE-2020-29283

An SQL injection vulnerability was discovered in Online Doctor Appointment Booking System PHP and Mysql via the q parameter to getuser.php...

9.8CVSS9.8AI score0.01335EPSS
SaveExploits1References2
OSV
OSV
•added 2020/12/02 10:15 p.m.•13 views

CVE-2020-29283

An SQL injection vulnerability was discovered in Online Doctor Appointment Booking System PHP and Mysql via the q parameter to getuser.php...

9.8CVSS7.3AI score0.01335EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2020/12/02 9:08 p.m.•37 views

CVE-2020-29283

An SQL injection vulnerability was discovered in Online Doctor Appointment Booking System PHP and Mysql via the q parameter to getuser.php...

9.9AI score0.01335EPSS
SaveExploits1References2
CVE
CVE
•added 2020/12/02 9:08 p.m.•92 views

CVE-2020-29283

The CVE-2020-29283 entry concerns the Online Doctor Appointment Booking System (PHP and MySQL). The vulnerability is an SQL injection in the getuser.php endpoint, exploitable via the q parameter. Affected component is the server-side PHP script handling getuser.php queries, with the underlying ca...

9.8CVSS9.8AI score0.01335EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2020/12/02 12:00 a.m.•18 views

Online Doctor Appointment Booking System SQL注入漏洞

Online Doctor Appointment Booking System is a web-based online appointment booking system from PHP Scripts Mall Php Scripts Mall, India. Online Doctor Appointment Booking System suffers from a SQL injection vulnerability that originates from a SQL injection vulnerability in the getuser.php...

9.8CVSS7.4AI score0.01335EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/02 12:00 a.m.•5 views

CVE-2020-29283: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection vulnerability was discovered in Online Doctor Appointment Booking System PHP and Mysql via the q parameter to getuser.php...

9.8CVSS8.2AI score0.01335EPSS
SaveExploits1References2
Exploit DB
Exploit DB
•added 2020/11/17 12:00 a.m.•969 views

Online Doctor Appointment Booking System PHP and Mysql 1.0 - 'q' SQL Injection

Exploit Title: Online Doctor Appointment Booking System PHP and Mysql 1.0 - 'q' SQL Injection Google Dork: N/A Date: 11/16/2020 Exploit Author: Ramil Mustafayev Vendor Homepage: https://projectworlds.in/free-projects/php-projects/online-doctor-appointment-booking-system-php-and-mysql/ Software...

5.3AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/08 12:00 a.m.•5 views

CVE-2020-25271: Improper Neutralization of Input During Web Page Generation

PHPGurukul hospital-management-system-in-php 4.0 allows XSS via admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, or admin/appointment-history.php...

5.4CVSS5.7AI score0.00617EPSS
SaveExploits1References2
Packet Storm
Packet Storm
•added 2018/02/01 12:00 a.m.•46 views

WordPress Doctor Appointment Booking 1.0.0 SQL Injection / XSS

Exploit Title: Wordpress Doctor Appointment Booking Plugin v1.0.0 - SQL Injection / XSS Date: 2018-01-01 Exploit Author: 8bitsec Vendor Homepage: https://codecanyon.net/ Software Link: https://codecanyon.net/item/doctor-appointment-booking-wordpress-plugin/21215314 Version: 1.0.0 Tested on: Kali...

7.1AI score
SaveExploits0
Rows per page
Query Builder