942 matches found
Online Doctor Appointment Booking System SQL注入漏洞
Online Doctor Appointment Booking System is a web-based online appointment booking system from PHP Scripts Mall Php Scripts Mall, India. Online Doctor Appointment Booking System suffers from a SQL injection vulnerability that originates from a SQL injection vulnerability in the getuser.php...
Online Doctor Appointment Booking System PHP and Mysql 1.0 - 'q' SQL Injection
Exploit Title: Online Doctor Appointment Booking System PHP and Mysql 1.0 - 'q' SQL Injection Google Dork: N/A Date: 11/16/2020 Exploit Author: Ramil Mustafayev Vendor Homepage: https://projectworlds.in/free-projects/php-projects/online-doctor-appointment-booking-system-php-and-mysql/ Software...
CVE-2020-25271
PHPGurukul hospital-management-system-in-php 4.0 allows XSS via admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, or admin/appointment-history.php...
CVE-2020-25271
PHPGurukul hospital-management-system-in-php 4.0 allows XSS via admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, or admin/appointment-history.php...
Design/Logic Flaw
PHPGurukul hospital-management-system-in-php 4.0 allows XSS via admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, or admin/appointment-history.php...
PT-2020-16054 · Phpgurukul · Phpgurukul Hospital-Management-System-In-Php
Name of the Vulnerable Software and Affected Versions: PHPGurukul hospital-management-system-in-php version 4.0 Description: The issue allows for XSS attacks via several endpoints, including "admin/patient-search.php", "doctor/search.php", "book-appointment.php", "doctor/appointment-history.php",...
Dell SupportAssist PC Doctor Vulnerability (DSA-2019-084)
Dell SupportAssist for Business PCs version 2.0 and Dell SupportAssist for Home PCs version prior to 3.2.2 are affected by a security vulnerability within the PC Doctor component Uncontrolled Search Path Element before PC-Doctor Toolbox 7.3. C Tenable Network Security, Inc. include'compat.inc'; i...
Command Execution Vulnerability in EyouCms System Doctor Plugin
EyouCms system doctor plugin is a user-friendly diagnostic system, repair their own difficulties, and some sql operation functions of the plugin. EyouCms System Doctor plugin has a command execution vulnerability that can be exploited by attackers to execute arbitrary SQL commands...
doctor-123.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1111983 Security Researcher geeknik Helped patch 8722 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting doctor-123.ru website and...
doctor-96.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1109165 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting doctor-96.ru website and i...
doctor-68.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1109163 Security Researcher geeknik Helped patch 8748 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting doctor-68.ru website and i...
Hospital Management System 4.0 Cross Site Scripting
Exploit Title: Hospital Management System 4.0 Stored Cross-Site Scripting Vulnerability Date: 2020-01-20 Exploit Author: Priyanka Samak Vendor Homepage: https://phpgurukul.com/ Software Link : https://phpgurukul.com/hospital-management-system-in-php/ Software : Hospital Management System Version ...
PT-2020-18294 · Phpgurukul · Phpgurukul Hospital Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System in PHP version 4.0 Description: The issue concerns multiple reflected XSS vulnerabilities. These can be triggered via the searchdata or Doctorspecialization parameter. Recommendations: For PHPGurukul...
Hospital Management System 4.0 Cross Site Scripting
Exploit Title: Hospital Management System 4.0 Multiple Reflected XSS Google Dork: N/A Date: 1/2/2020 Exploit Author: FULLSHADE Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/hospital-management-system-in-php/ Version: v4.0 Tested on: Windows CVE : CVE-2020-5193...
Hospital Management System 4.0 searchdata SQL Injection
Exploit Title: Hospital Management System 4.0 - 'searchdata' SQL Injection Google Dork: N/A Date: 2020-01-02 Exploit Author: FULLSHADE Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/hospital-management-system-in-php/ Version: v4.0 Tested on: Windows CVE : N/A The...
Hospital Management System 4.0 - (searchdata) SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Hospital Management System 4.0 - 'searchdata' SQL Injection Exploit Author: FULLSHADE Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/hospital-management-system-in-php/ Version: v4.0 Tested on:...
miyagi.doctor-search.tv Cross Site Scripting vulnerability
Security Researcher devl00p Helped patch 2581 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting miyagi.doctor-search.tv website and its users. Following...
CVE-2019-13131
Super Micro SuperDoctor 5, when restrictions are not implemented in agent.cfg, allows remote attackers to execute arbitrary commands via NRPE...
PC-Doctor Toolbox Arbitrary Code Execution Vulnerability
PC-Doctor Toolbox is a hardware diagnostic and system information monitoring tool from PC-Doctor Toolbox USA. A security vulnerability exists in PC-Doctor Toolbox versions prior to 7.3. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service in the...