CVE-2022-45729

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee ID parameter...

CVE-2022-45729

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee ID parameter...

PT-2023-14739 · Unknown · Doctor Appointment Management System

Name of the Vulnerable Software and Affected Versions: Doctor Appointment Management System version 1.0.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee ID parameter. Recommendations: For...

PT-2023-14738 · Unknown · Doctor Appointment Management System

Name of the Vulnerable Software and Affected Versions: Doctor Appointment Management System version 1.0.0 Description: The issue is related to a cross-site scripting XSS vulnerability. Cross-site scripting is a type of security vulnerability that occurs when an attacker is able to inject maliciou...

CVE-2022-45728

CVE-2022-45728 concerns Doctor Appointment Management System v1.0.0 with a cross-site scripting (XSS) vulnerability. The initial records specify XSS as the issue; CVSS 3.1 metrics show a Medium severity (6.1) with network attack vector, low complexity, no privileges required, user interaction req...

CVE-2022-45729

Summary (CVE-2022-45729) : Affected software is Doctor Appointment Management System, version 1.0.0. The vulnerability is a Cross-Site Scripting (XSS) issue reachable via a crafted payload injected into the Employee ID parameter . The underlying cause is an XSS flaw in the handling of this parame...

Doctor Appointment Management System 跨站脚本漏洞

Doctor Appointment Management System is a Doctor Appointment Management System by the individual developer ANUJ KUMAR. A security vulnerability exists in Doctor Appointment Management System v1.0.0, which originates from a cross-site scripting XSS attack on the fname component...

CVE-2022-45728: Improper Neutralization of Input During Web Page Generation

Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2022-45728

Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2022-45729: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee ID parameter...

Never Mind the Ears, Here's Security Nation

It's another year down and another season down for Security Nation. With the close of our fifth season, I wanted to take a minute here to reflect on who we spoke with and what we talked about. The show titles focus as you would expect on the individual interview subjects, but there's a bunch of...

doctor-toner.co.il Cross Site Scripting vulnerability OBB-3061144

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-42206: Improper Neutralization of Input During Web Page Generation

PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php...

CVE-2022-36202

Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php. The settings.php is affected by Broken Access Control IDOR via id= parameter...

CVE-2022-36203

Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting XSS via the admin panel. In addition, it leads to takeover the administrator account by stealing the cookie via XSS...

CVE-2022-36201

Doctor’s Appointment System v1.0 is vulnerable to Blind SQLi via settings.php...

CVE-2022-36203

Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting XSS via the admin panel. In addition, it leads to takeover the administrator account by stealing the cookie via XSS...

Doctor’s Appointment System SQL注入漏洞

Doctor's Appointment System is a doctor's appointment system by Hashen Udara, an individual developer. Doctor's Appointment System version 1.0 suffers from a SQL injection vulnerability that originates from an attacker being able to achieve SQL injection via the ?id= parameter of its booking.php...

PT-2022-23258 · Unknown · Doctor Appointment System

Name of the Vulnerable Software and Affected Versions: Doctor's Appointment System version 1.0 Description: The issue concerns Incorrect Access Control, specifically Broken Access Control IDOR, in the settings.php file located at the /edoc/patient/ endpoint. The vulnerability is exploited via the...

PT-2022-23257 · Unknown · Doctor Appointment System

Name of the Vulnerable Software and Affected Versions: Doctor’s Appointment System version 1.0 Description: The issue concerns a Blind SQL Injection vulnerability. It is exploitable via the settings.php file and also through the booking.php file, where the id parameter is vulnerable...