1179 matches found
Code-Projects E-Health Care System 注入漏洞
Code-Projects E-Health Care System is a Code-Projects open source e-health care system. An injection vulnerability exists in Code-Projects E-Health Care System version 1.0, which stems from the parameter email in the file /Doctor/doctorlogin.php can lead to SQL injection...
Code-Projects E-Health Care System 注入漏洞
Code-Projects E-Health Care System is an e-health care system from Code-Projects open source. An injection vulnerability exists in Code-Projects E-Health Care System version 1.0, which originates in the file /Doctor/userappointment.php with parameters scheduleid/scheduledate/scheduleday/starttime...
CVE-2024-10987: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects E-Health Care System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Doctor/userappointment.php. The manipulation of the argument scheduleid/scheduledate/scheduleday/starttime/endtime/booking...
CVE-2024-10967
A vulnerability was found in code-projects E-Health Care System 1.0. It has been classified as critical. Affected is an unknown function of the file /Doctor/deleteuserappointmentrequest.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely...
Code-Projects E-Health Care System 注入漏洞
Code-Projects E-Health Care System is an e-health care system from Code-Projects open source. An injection vulnerability exists in Code-Projects E-Health Care System version 1.0, which stems from the parameter id of the file /Doctor/deleteuserappointmentrequest.php that can lead to SQL injection...
PT-2024-16670 · Code Projects · Code-Projects E-Health Care System
Name of the Vulnerable Software and Affected Versions: code-projects E-Health Care System version 1.0 Description: A critical issue was discovered in the system, affecting an unknown function of the file /Doctor/delete user appointment request.php. The manipulation of the id argument leads to SQL...
PT-2024-16680 · Code Projects · Code-Projects E-Health Care System
Name of the Vulnerable Software and Affected Versions: code-projects E-Health Care System version 1.0 Description: A critical issue was found in the file /Doctor/doctor login.php, where the manipulation of the email argument leads to SQL injection. The attack can be launched remotely. Other...
PT-2024-16679
Name of the Vulnerable Software and Affected Versions code-projects E-Health Care System version 1.0 Description A critical issue was found in the code-projects E-Health Care System, affecting an unknown functionality of the file /Doctor/user appointment.php. The manipulation of the arguments...
CVE-2024-10810
A vulnerability was found in code-projects E-Health Care System 1.0. It has been classified as critical. Affected is an unknown function of the file Doctor/apprequest.php. The manipulation of the argument appid leads to sql injection. It is possible to launch the attack remotely. The exploit has...
CVE-2024-10809
A vulnerability was found in code-projects E-Health Care System 1.0 and classified as critical. This issue affects some unknown processing of the file /Doctor/chat.php. The manipulation of the argument name/message leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2024-10809
A vulnerability was found in code-projects E-Health Care System 1.0 and classified as critical. This issue affects some unknown processing of the file /Doctor/chat.php. The manipulation of the argument name/message leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2024-10810: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects E-Health Care System 1.0. It has been classified as critical. Affected is an unknown function of the file Doctor/apprequest.php. The manipulation of the argument appid leads to sql injection. It is possible to launch the attack remotely. The exploit has...
CVE-2024-10807: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been rated as problematic. This issue affects some unknown processing of the file hms/doctor/search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be initiated remotely...
CVE-2024-10809: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects E-Health Care System 1.0 and classified as critical. This issue affects some unknown processing of the file /Doctor/chat.php. The manipulation of the argument name/message leads to sql injection. The attack may be initiated remotely. The exploit has been...
PT-2024-16567 · Code Projects · Code-Projects E-Health Care System
Name of the Vulnerable Software and Affected Versions: code-projects E-Health Care System version 1.0 Description: A critical issue affects some unknown processing of the file /Doctor/chat.php. The manipulation of the arguments name and message leads to sql injection. The attack may be initiated...
PT-2024-16569 · Microsoft · Sql Server 2019
Name of the Vulnerable Software and Affected Versions: code-projects E-Health Care System version 1.0 SQL Server 2019 affected versions not specified Description: A critical vulnerability was found in the code-projects E-Health Care System, affecting an unknown function of the file Doctor/app...
PT-2024-16565 · Unknown · Phpgurukul Hospital Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 4.0 Description: A vulnerability was found in the PHPGurukul Hospital Management System, affecting some unknown processing of the file hms/doctor/search.php. The manipulation of the argument...
PT-2024-16550 · Unknown · Codezips Hospital Appointment System
Name of the Vulnerable Software and Affected Versions: Codezips Hospital Appointment System version 1.0 Description: A critical issue has been found in the system, affecting some unknown processing of the file /doctorAction.php. The manipulation of the argument Name leads to sql injection. The...
Doctor Appointment Management System Cross-Site Scripting Vulnerability (CNVD-2025-21427)
Doctor Appointment Management System is a doctor appointment management system. Doctor Appointment Management System suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an...