Lucene search
+L

1179 matches found

CNNVD
CNNVD
•added 2023/02/27 12:00 a.m.•15 views

SourceCodester Doctor Appointment System SQL注入漏洞

SourceCodester Doctor Appointment System is an application from SourceCodester USA. It provides an appointment scheduling feature. A SQL injection vulnerability exists in SourceCodester Doctors Appointment System version 1.0, which originates from an unknown function in the file /admin/edit-doc.p...

8.8CVSS7AI score0.007EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/02/27 12:00 a.m.•15 views

SourceCodester Doctors Appointment System SQL注入漏洞

SourceCodester Doctor Appointment System is an application from SourceCodester USA. It provides an appointment scheduling feature. A SQL injection vulnerability exists in the SourceCodester Doctors Appointment System version 1.0, which originates from a security issue with an unknown function in...

8.8CVSS7AI score0.007EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/02/27 12:00 a.m.•16 views

SourceCodester Doctors Appointment System SQL注入漏洞

SourceCodester Doctor Appointment System is an application from SourceCodester USA. It provides an appointment scheduling feature. A SQL injection vulnerability exists in the SourceCodester Doctors Appointment System version 1.0, which originates from an unknown function in the file...

8.8CVSS7AI score0.00728EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/27 12:00 a.m.•4 views

CVE-2023-1056: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /edoc/doctor/patient.php. The manipulation of the argument search12 leads to sql injection. The attack can be launch...

8.8CVSS5.5AI score0.007EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/24 12:00 a.m.•5 views

CVE-2023-1006: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been classified as problematic. This affects an unknown part of the component New Record Handler. The manipulation of the argument Firstname/Middlename/Lastname/Suffix/Nationality/Doctor Fullname/Doctor Suff...

5.4CVSS4.1AI score0.00262EPSS
SaveExploits0References2
Prion
Prion
•added 2023/02/17 3:15 p.m.•28 views

Sql injection

SQL Injection vulnerability in Projectworlds Online Doctor Appointment Booking System, allows attackers to gain sensitive information via the q parameter to the getuser.php endpoint...

7.5CVSS9.7AI score0.01244EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2023/02/17 12:00 a.m.•15 views

Online Doctor Appointment Booking System SQL注入漏洞

Online Doctor Appointment Booking System is an open source online doctor appointment booking system. The Online Doctor Appointment Booking System suffers from a SQL injection vulnerability that originates from allowing an attacker to obtain sensitive information via the q parameter of the...

9.8CVSS8.6AI score0.01244EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/02/17 12:00 a.m.•17 views

PT-2023-11774 · Unknown · Projectworlds Online Doctor Appointment Booking System

Name of the Vulnerable Software and Affected Versions: Projectworlds Online Doctor Appointment Booking System affected versions not specified Description: The issue allows attackers to gain sensitive information via the "getuser.php" endpoint, specifically through the q parameter. This is a SQL...

9.8CVSS9.7AI score0.01244EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/17 12:00 a.m.•4 views

CVE-2020-29168: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Projectworlds Online Doctor Appointment Booking System, allows attackers to gain sensitive information via the q parameter to the getuser.php endpoint...

9.8CVSS5.9AI score0.01244EPSS
SaveExploits1References3
CVE
CVE
•added 2023/02/17 12:00 a.m.•76 views

CVE-2020-29168

The CVE-2020-29168 entry describes a SQL Injection in the Projectworlds Online Doctor Appointment Booking System. Affected component: the getuser.php endpoint, where user input in the q parameter is not properly sanitized. Impact is high (CVE metrics: Confidentiality/Integrity/Availability all Hi...

9.8CVSS9.7AI score0.01244EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2023/01/26 9:18 p.m.•14 views

CVE-2022-46128

phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting XSS via searchdata=...

6.1CVSS5.8AI score0.00478EPSS
SaveExploits0References2
Prion
Prion
•added 2023/01/26 9:18 p.m.•30 views

Cross site scripting

phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting XSS via searchdata=...

5.8CVSS6AI score0.00478EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2023/01/26 9:18 p.m.•38 views

CVE-2022-46128

phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting XSS via searchdata=...

6.1CVSS6AI score0.00478EPSS
SaveExploits0References2
OSV
OSV
•added 2023/01/26 9:17 p.m.•16 views

CVE-2022-45730

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function...

6.1CVSS5.9AI score0.00518EPSS
SaveExploits0References2
NVD
NVD
•added 2023/01/26 9:17 p.m.•25 views

CVE-2022-45730

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function...

6.1CVSS5.9AI score0.00518EPSS
SaveExploits0References2
Prion
Prion
•added 2023/01/26 9:17 p.m.•29 views

Cross site scripting

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function...

5.8CVSS5.9AI score0.00518EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2023/01/26 12:00 a.m.•13 views

Doctor Appointment Management System 跨站脚本漏洞

Doctor Appointment Management System is a Doctor Appointment Management System by the individual developer ANUJ KUMAR. A security vulnerability exists in Doctor Appointment Management System version v1.0.0, which originates from cross-site scripting XSS and allows an attacker to execute arbitrary...

6.1CVSS6.3AI score0.00518EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/01/26 12:00 a.m.•31 views

Doctor Appointment Management System 跨站脚本漏洞

Doctor Appointment Management System is a Doctor Appointment Management System by the individual developer ANUJ KUMAR. A security vulnerability exists in Doctor Appointment Management System v1.0.0, which originates from the presence of cross-site scripting XSS...

6.1CVSS5.9AI score0.00478EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/01/25 12:00 a.m.•12 views

CVE-2022-46128

phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting XSS via searchdata=...

6.2AI score0.00478EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/01/25 12:00 a.m.•10 views

CVE-2022-45730

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function...

5.9AI score0.00518EPSS
SaveExploits0References2
Rows per page
Query Builder