1179 matches found
CVE-2022-45730
A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function...
CVE-2022-46128
phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting XSS via searchdata=...
PT-2023-14740 · Unknown · Doctor Appointment Management System
Name of the Vulnerable Software and Affected Versions: Doctor Appointment Management System version 1.0.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function. Recommendations: For Doctor...
CVE-2022-46128: Improper Neutralization of Input During Web Page Generation
phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting XSS via searchdata=...
CVE-2022-45730
CVE-2022-45730 is an XSS vulnerability in Doctor Appointment Management System v1.0.0, where a crafted payload injected into the Search function can execute arbitrary scripts/HTML. Concrete details across sources confirm the affected software and the input point (Search). Some reports (PT-2023-14...
CVE-2022-46128
Affected software: phpgurukul Doctor Appointment Management System v1.0.0. Vulnerability: Cross-Site Scripting (XSS) via the searchdata parameter. Underlying details: CVSS v3.1 base score 6.1 (MEDIUM); attack vector: network; attack complexity: low; privileges required: none; user interaction req...
CVE-2022-45730: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function...
CVE-2022-48120
SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9bd on March 13, 2021, allows attackers to execute arbitrary commands via the contact and doctor parameters to /search.php...
CVE-2022-48120
SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9bd on March 13, 2021, allows attackers to execute arbitrary commands via the contact and doctor parameters to /search.php...
Hospital Management System SQL注入漏洞
Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A SQL injection vulnerability exists in Hospital Management System. An attacker could exploit this vulnerability to execute arbitrary...
CVE-2022-48120: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9bd on March 13, 2021, allows attackers to execute arbitrary commands via the contact and doctor parameters to /search.php...
CVE-2022-48120
CVE-2022-48120 concerns a SQL Injection flaw in kishan0725 Hospital Management System. The vulnerability is triggered in /search.php via the contact and doctor parameters, allowing an attacker to execute arbitrary commands. Root cause is a lack of input validation/parameterization in the affected...
PT-2023-15580
Name of the Vulnerable Software and Affected Versions Hospital Management System versions prior to the version including commit 4770d740f2512693ef8fd9aa10a8d17f79fad9bd Description The issue allows attackers to execute arbitrary commands via the contact and doctor parameters to the "/search.php"...
CVE-2022-45728
Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting XSS vulnerability...
CVE-2022-45729
A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee ID parameter...
CVE-2022-45728
Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting XSS vulnerability...
Cross site scripting
A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee ID parameter...
Cross site scripting
Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting XSS vulnerability...
Doctor Appointment Management System 跨站脚本漏洞
Doctor Appointment Management System is a doctor appointment management system from the individual developer ANUJ KUMAR. A security vulnerability exists in Doctor Appointment Management System version v1.0.0 that originates from a crafted payload that allows an attacker to execute arbitrary web...