Lucene search
+L

953 matches found

CNNVD
CNNVD
added 2021/06/22 12:0 a.m.7 views

PHPGurukul Hospital Management System SQL注入漏洞

PHPGurukul Hospital Management System is a web application for hospitals to manage doctors and patients. A SQL injection vulnerability exists in \hms\getdoctor.php in PHPGurukul Hospital Management System version 4.0. An attacker can exploit this vulnerability to obtain sensitive information from...

7.5CVSS5.9AI score0.02188EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2021/06/22 12:0 a.m.9 views

PT-2021-10737 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System in PHP version 4.0 Description: The issue concerns a SQL injection vulnerability located in the hmsget doctor.php file. This vulnerability can be exploited by remote unauthenticated users to obtain...

7.5CVSS7.6AI score0.02188EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2021/06/22 12:0 a.m.7 views

PT-2021-10735 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 4.0 Description: The issue concerns a SQL injection vulnerability located in the hmsget doctor.php file. This vulnerability can be exploited by remote unauthenticated users to obtain sensitive...

7.5CVSS7.6AI score0.02188EPSS
SaveExploits1References2
Packet Storm
Packet Storm
added 2021/04/22 12:0 a.m.210 views

RemoteClinic 2.0 Cross Site Scripting

Exploit Title: RemoteClinic 2.0 - 'Multiple' Stored Cross-Site Scripting XSS Date: 13/04/2021 Exploit Author: Saud Ahmad Vendor Homepage: https://remoteclinic.io/ Software Link: https://github.com/remoteclinic/RemoteClinic Version: 2.0 Tested on: Windows 10 CVE : CVE-2021-30030, CVE-2021-30034,...

3.5CVSS5.5AI score0.01773EPSS
SaveExploits7
Exploit DB
Exploit DB
added 2021/04/22 12:0 a.m.278 views

RemoteClinic 2.0 - 'Multiple' Stored Cross-Site Scripting (XSS)

Exploit Title: RemoteClinic 2.0 - 'Multiple' Stored Cross-Site Scripting XSS Date: 13/04/2021 Exploit Author: Saud Ahmad Vendor Homepage: https://remoteclinic.io/ Software Link: https://github.com/remoteclinic/RemoteClinic Version: 2.0 Tested on: Windows 10 CVE : CVE-2021-30030, CVE-2021-30034,...

5.4CVSS5.5AI score0.01773EPSS
SaveExploits9
zdt
zdt
added 2021/04/22 12:0 a.m.82 views

RemoteClinic 2.0 - (Multiple) Stored Cross-Site Scripting (XSS) Vulnerability

Exploit Title: RemoteClinic 2.0 - 'Multiple' Stored Cross-Site Scripting XSS Exploit Author: Saud Ahmad Vendor Homepage: https://remoteclinic.io/ Software Link: https://github.com/remoteclinic/RemoteClinic Version: 2.0 Tested on: Windows 10 CVE : CVE-2021-30030, CVE-2021-30034, CVE-2021-30039,...

5.4CVSS0.01773EPSS
SaveExploits7
The Hacker News
The Hacker News
added 2021/04/10 6:50 a.m.112 views

Hackers Tampered With APKPure Store to Distribute Malware Apps

APKPure, one of the largest alternative app stores outside of the Google Play Store, was infected with malware this week, allowing threat actors to distribute Trojans to Android devices. In a supply-chain attack similar to that of German telecommunications equipment manufacturer Gigaset, the...

1.1AI score
SaveExploits0
CNVD
CNVD
added 2021/03/25 12:0 a.m.13 views

Doctor Appointment System SQL Injection Vulnerability (CNVD-2021-22959)

Doctor Appointment System is a PHP/MySQLi based doctor appointment system. A SQL blind injection vulnerability exists in contactus.php in Doctor Appointment System 1.0. The vulnerability can be exploited to insert malicious SQL queries via email parameters...

7.5CVSS7.5AI score0.07826EPSS
SaveExploits3References1
CNVD
CNVD
added 2021/03/25 12:0 a.m.10 views

Doctor Appointment System SQL Injection Vulnerability (CNVD-2021-22960)

Doctor Appointment System is a PHP/MySQLi based doctor appointment system. A SQL blind injection vulnerability exists in contactus.php in Doctor Appointment System 1.0. An attacker can exploit this vulnerability to insert malicious SQL queries via the firstname parameter...

7.5CVSS7.4AI score0.09299EPSS
SaveExploits3References1
CNVD
CNVD
added 2021/03/25 12:0 a.m.14 views

Doctor Appointment System SQL Injection Vulnerability

Sourcecodesterk Doctor Appointment System is a Sourcecodesterk open source application. Provides an appointment function . Doctor Appointment System version 1.0 suffers from an SQL injection vulnerability that originates from a remote blind SQL injection vulnerability in the name and email...

7.5CVSS7.8AI score0.07826EPSS
SaveExploits3References1
OSV
OSV
added 2021/03/24 2:15 p.m.9 views

CVE-2021-27319

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via email parameter...

7.5CVSS7.1AI score0.07826EPSS
SaveExploits3References1
NVD
NVD
added 2021/03/24 2:15 p.m.23 views

CVE-2021-27319

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via email parameter...

7.5CVSS0.07826EPSS
SaveExploits3References1
OSV
OSV
added 2021/03/24 2:15 p.m.7 views

CVE-2021-27320

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter...

7.5CVSS7.1AI score0.09299EPSS
SaveExploits3References2
OSV
OSV
added 2021/03/24 2:15 p.m.7 views

CVE-2021-27315

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter...

7.5CVSS7.2AI score0.07826EPSS
SaveExploits3References1
NVD
NVD
added 2021/03/24 2:15 p.m.22 views

CVE-2021-27316

Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via lastname parameter...

7.5CVSS0.07826EPSS
SaveExploits3References1
OSV
OSV
added 2021/03/24 2:15 p.m.4 views

CVE-2021-27316

Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via lastname parameter...

7.5CVSS7.2AI score0.07826EPSS
SaveExploits3References1
NVD
NVD
added 2021/03/24 2:15 p.m.23 views

CVE-2021-27315

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter...

7.5CVSS0.07826EPSS
SaveExploits3References1
Prion
Prion
added 2021/03/24 2:15 p.m.21 views

Sql injection

Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via lastname parameter...

5CVSS7.9AI score0.07826EPSS
SaveExploits3References1Affected Software1
Prion
Prion
added 2021/03/24 2:15 p.m.19 views

Sql injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter...

5CVSS7.9AI score0.09299EPSS
SaveExploits3References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/03/24 2:15 p.m.5 views

CVE-2021-27320

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter...

7.5CVSS5.7AI score0.09299EPSS
SaveExploits3References4
Rows per page
Query Builder