1119 matches found
Command Execution Vulnerability in EyouCms System Doctor Plugin
EyouCms system doctor plugin is a user-friendly diagnostic system, repair their own difficulties, and some sql operation functions of the plugin. EyouCms System Doctor plugin has a command execution vulnerability that can be exploited by attackers to execute arbitrary SQL commands...
doctor-123.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1111983 Security Researcher geeknik Helped patch 8722 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting doctor-123.ru website and...
doctor-96.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1109165 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting doctor-96.ru website and i...
doctor-68.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1109163 Security Researcher geeknik Helped patch 8748 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting doctor-68.ru website and i...
Hospital Management System 4.0 Cross Site Scripting
Exploit Title: Hospital Management System 4.0 Stored Cross-Site Scripting Vulnerability Date: 2020-01-20 Exploit Author: Priyanka Samak Vendor Homepage: https://phpgurukul.com/ Software Link : https://phpgurukul.com/hospital-management-system-in-php/ Software : Hospital Management System Version ...
PT-2020-18294 · Phpgurukul · Phpgurukul Hospital Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System in PHP version 4.0 Description: The issue concerns multiple reflected XSS vulnerabilities. These can be triggered via the searchdata or Doctorspecialization parameter. Recommendations: For PHPGurukul...
Hospital Management System 4.0 Cross Site Scripting
Exploit Title: Hospital Management System 4.0 Multiple Reflected XSS Google Dork: N/A Date: 1/2/2020 Exploit Author: FULLSHADE Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/hospital-management-system-in-php/ Version: v4.0 Tested on: Windows CVE : CVE-2020-5193...
Hospital Management System 4.0 searchdata SQL Injection
Exploit Title: Hospital Management System 4.0 - 'searchdata' SQL Injection Google Dork: N/A Date: 2020-01-02 Exploit Author: FULLSHADE Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/hospital-management-system-in-php/ Version: v4.0 Tested on: Windows CVE : N/A The...
Hospital Management System 4.0 - (searchdata) SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Hospital Management System 4.0 - 'searchdata' SQL Injection Exploit Author: FULLSHADE Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/hospital-management-system-in-php/ Version: v4.0 Tested on:...
miyagi.doctor-search.tv Cross Site Scripting vulnerability
Security Researcher devl00p Helped patch 2581 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting miyagi.doctor-search.tv website and its users. Following...
CVE-2019-13131
Super Micro SuperDoctor 5, when restrictions are not implemented in agent.cfg, allows remote attackers to execute arbitrary commands via NRPE...
PC-Doctor Toolbox Arbitrary Code Execution Vulnerability
PC-Doctor Toolbox is a hardware diagnostic and system information monitoring tool from PC-Doctor Toolbox USA. A security vulnerability exists in PC-Doctor Toolbox versions prior to 7.3. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service in the...
CVE-2019-12280
PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element...
CVE-2019-12280
PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element...
Design/Logic Flaw
PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element...
CVE-2019-12280
PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element...
CVE-2019-12280
CVE-2019-12280 affects PC-Doctor Toolbox before 7.3, enabling Uncontrolled Search Path Element with DLL hijacking. Dell/PC-Doctor components (SupportAssist for Business/Home PCs) run with SYSTEM privileges and may load unsigned DLLs from user-writable PATH locations, enabling local privilege esca...
SuperDoctor5 - NRPE Remote Code Execution
SuperDoctor5 - NRPE Remote Code Execution SuperMicro implemented a Remote Command Execution plugin in their implementation of NRPE in SuperDocter 5, which is their monitoring utility for SuperMicro chassis'. This is an intended feature but leaves the system open by default to unauthenticated remo...
Dell pre-installed SupportAssist components DLL hijacking vulnerability, worldwide more than 1 billion devices face a cyber-attack risk-vulnerability warning-the black bar safety net
SupportAssist is a powerful support application helps to ensure that the user of the system is always running optimally, take the initiative to find the problem and allows you to run the diagnostic program and the driver update scan. Recently, however, researchers have found that this tool softwa...
