950 matches found
PT-2023-28106 · Sourcecodester · Sourcecodester Free Hospital Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Free Hospital Management System for Small Practices version 1.0 Description: A critical issue has been found in the SourceCodester Free Hospital Management System for Small Practices, affecting some unknown functionality of the...
Hospital Management System Security Vulnerability
A Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A security vulnerability exists in SourceCodester Free Hospital Management System for Small Practices version 1.0, which stems from...
doctor-electric-services.com Cross Site Scripting vulnerability OBB-3563053
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
KiviCare Management System < 3.2.1 - Multiple CSRF
The plugin does not have CSRF checks either flawed or missing completely in various AJAX actions, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks. This includes, but is not limited to: Delete arbitrary appointments/medical records/etc, create/update...
doctor-rabat.net Cross Site Scripting vulnerability OBB-3319439
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Wondershare Dr.Fone 安全漏洞
Wondershare Dr. Fone is a mobile device toolkit software from China Wondershare Technology Wondershare. The software provides applications, transfer data, contacts, messages and other auxiliary functions for the device. A security vulnerability exists in Wondershare Dr.Fone version 12.9.6. A remo...
WordPress doctor-listing Plugin < 1.3.6 is vulnerable to Privilege Escalation
Software doctor-listing Type Plugin Vulnerable versions 1.3.6 Fixed in 1.3.6 OWASP Top 10 A5: Broken Access Control Classification Privilege Escalation CVE CVE-2020-36666 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 30151bcf23e5 Credits Omar Badran Required privilege...
manhattanentdoctor.com Cross Site Scripting vulnerability OBB-3208881
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-1057
A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been rated as critical. Affected by this issue is the function edoc of the file login.php. The manipulation of the argument usermail leads to sql injection. VDB-221822 is the identifier assigned to this vulnerabili...
SourceCodester Doctors Appointment System SQL注入漏洞
SourceCodester Doctor Appointment System is an application from SourceCodester USA. It provides an appointment scheduling feature. A SQL injection vulnerability exists in the SourceCodester Doctors Appointment System version 1.0, which originates from an unknown function in the file...
Doctors Appointment System SQL注入漏洞
SourceCodester Doctor Appointment System is an application from SourceCodester USA. It provides an appointment scheduling feature. A SQL injection vulnerability exists in SourceCodester Doctors Appointment System version 1.0, which originates from a security issue in the file create-account.php...
SourceCodester Doctors Appointment System SQL注入漏洞
SourceCodester Doctor Appointment System is an application from SourceCodester USA. It provides an appointment scheduling feature. A SQL injection vulnerability exists in the SourceCodester Doctors Appointment System version 1.0, which originates from a security issue with an unknown function in...
SourceCodester Doctor Appointment System SQL注入漏洞
SourceCodester Doctor Appointment System is an application from SourceCodester USA. It provides an appointment scheduling feature. A SQL injection vulnerability exists in SourceCodester Doctors Appointment System version 1.0, which originates from an unknown function in the file /admin/edit-doc.p...
Sql injection
SQL Injection vulnerability in Projectworlds Online Doctor Appointment Booking System, allows attackers to gain sensitive information via the q parameter to the getuser.php endpoint...
PT-2023-11774 · Unknown · Projectworlds Online Doctor Appointment Booking System
Name of the Vulnerable Software and Affected Versions: Projectworlds Online Doctor Appointment Booking System affected versions not specified Description: The issue allows attackers to gain sensitive information via the "getuser.php" endpoint, specifically through the q parameter. This is a SQL...
CVE-2020-29168
The CVE-2020-29168 entry describes a SQL Injection in the Projectworlds Online Doctor Appointment Booking System. Affected component: the getuser.php endpoint, where user input in the q parameter is not properly sanitized. Impact is high (CVE metrics: Confidentiality/Integrity/Availability all Hi...
Online Doctor Appointment Booking System SQL注入漏洞
Online Doctor Appointment Booking System is an open source online doctor appointment booking system. The Online Doctor Appointment Booking System suffers from a SQL injection vulnerability that originates from allowing an attacker to obtain sensitive information via the q parameter of the...
Cross site scripting
phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting XSS via searchdata=...
