Lucene search
+L

1119 matches found

GithubExploit
GithubExploit
•added 2025/12/15 5:27 p.m.•203 views

Exploit for Cross-site Scripting in Phpgurukul Doctor_Appointment_Management_System

CVE-2025-45805 Poc Of CVE-2025-45805 Affected Product: Doctor...

7.6CVSS6AI score0.00388EPSS
SaveExploits2
RedhatCVE
RedhatCVE
•added 2025/12/12 1:06 a.m.•14 views

CVE-2025-66918

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting XSS in admin/add-session.php via the "title" parameter...

8.8CVSS6.3AI score0.00564EPSS
SaveExploits1References1
OSV
OSV
•added 2025/12/11 6:16 p.m.•18 views

CVE-2025-66918

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting XSS in admin/add-session.php via the "title" parameter...

8.8CVSS5.8AI score0.00564EPSS
SaveExploits1References2
NVD
NVD
•added 2025/12/11 6:16 p.m.•30 views

CVE-2025-66918

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting XSS in admin/add-session.php via the "title" parameter...

8.8CVSS0.00564EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/12/11 12:00 a.m.•15 views

Edoc-doctor-appointment-system 安全漏洞

Edoc-doctor-appointment-system is a simple web project for e-channels by HashenUdara Personal Developer. A security vulnerability exists in Edoc-doctor-appointment-system version 1.0.1, which stems from an unfiltered title parameter in admin/add-session.php, which could lead to a cross-site...

8.8CVSS6.1AI score0.00564EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/12/11 12:00 a.m.•15 views

EUVD-2025-202753

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting XSS in admin/add-session.php via the "title" parameter...

8.8CVSS5.7AI score0.00564EPSS
SaveExploits1References3
CVE
CVE
•added 2025/12/11 12:00 a.m.•30 views

CVE-2025-66918

edoc-doctor-appointment-system v1.0.1 is vulnerable to a Cross Site Scripting (XSS) flaw in the admin/add-session.php component. The root cause is an unfiltered "title" parameter, which allows an attacker to inject malicious scripts into the web page. Practical consequences include the execution ...

8.8CVSS5.8AI score0.00564EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/11 12:00 a.m.•8 views

CVE-2025-66918

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting XSS in admin/add-session.php via the "title" parameter...

5.8AI score0.00564EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/11 12:00 a.m.•2 views

CVE-2025-66918: Improper Input Validation

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting XSS in admin/add-session.php via the "title" parameter...

8.8CVSS5.8AI score0.00564EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/12/11 12:00 a.m.•48 views

CVE-2025-66918

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting XSS in admin/add-session.php via the "title" parameter...

0.00564EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/12/03 12:26 a.m.•26 views

CVE-2025-65358

Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointment.php...

9.8CVSS7.8AI score0.00408EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/12/02 6:30 p.m.•14 views

EUVD-2025-200279

Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointment.php...

7.2AI score0.00408EPSS
SaveExploits1References3
OSV
OSV
•added 2025/12/02 5:16 p.m.•15 views

CVE-2025-65358

Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointment.php...

9.8CVSS5.8AI score0.00408EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/02 12:00 a.m.•1 views

CVE-2025-65358: Improper Neutralization of Special Elements used in an SQL Command

Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointment.php...

9.8CVSS5.8AI score0.00408EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/12/02 12:00 a.m.•24 views

PT-2025-48713

Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointment.php...

7.8AI score0.00408EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/12/02 12:00 a.m.•9 views

CVE-2025-65358

Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointment.php...

5.8AI score0.00408EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/12/02 12:00 a.m.•28 views

CVE-2025-65358

Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointment.php...

0.00408EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/12/02 12:00 a.m.•13 views

Edoc-doctor-appointment-system 安全漏洞

Edoc-doctor-appointment-system is a simple web project for e-channels by HashenUdara Personal Developer. A security vulnerability exists in Edoc-doctor-appointment-system version v1.0.1, which stems from the docid parameter in /admin/appointment.php being susceptible to SQL injection attacks...

9.8CVSS7.8AI score0.00408EPSS
SaveExploits1References3
CVE
CVE
•added 2025/12/02 12:00 a.m.•38 views

CVE-2025-65358

The Edoc-doctor-appointment-system version v1.0.1 is vulnerable to an SQL injection vulnerability. The flaw exists in the docid parameter located at the /admin/appointment.php endpoint. This vulnerability is caused by the improper neutralization of special elements used in an SQL command (CWE-89)...

9.8CVSS5.8AI score0.00408EPSS
SaveExploits1References2Affected Software1
RedhatCVE
RedhatCVE
•added 2025/11/19 12:10 a.m.•28 views

CVE-2025-63512

kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL que...

6.5CVSS7.9AI score0.00238EPSS
SaveExploits1References1
Rows per page
Query Builder