1120 matches found
CVE-2021-27316
Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via lastname parameter...
CVE-2021-27315
Doctor Appointment System 1.0 is affected by a Blind SQL injection in contactus.php, exploitable via the comment parameter. The root cause is lack of input validation on the comment field, allowing an unauthenticated attacker to inject and execute arbitrary SQL commands. Impact described includes...
CVE-2021-27315
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter...
CVE-2021-27319: Improper Neutralization of Special Elements used in an SQL Command
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via email parameter...
CVE-2021-27315: Improper Neutralization of Special Elements used in an SQL Command
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter...
CVE-2021-27320: Improper Neutralization of Special Elements used in an SQL Command
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter...
CVE-2021-27316: Improper Neutralization of Special Elements used in an SQL Command
Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via lastname parameter...
Sourcecodester Doctor Appointment System Cross-Site Scripting Vulnerability
Sourcecodester Doctor Appointment System is a Sourcecodesterk open source application. Provides an appointment function . Sourcecodester Doctor Appointment System version 1.0 suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client data in the WEB...
CVE-2021-27314
SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page...
CVE-2021-27314
SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page...
Doctor Appointment System 1.0 Cross Site Scripting
Exploit Title: Doctor Appointment System 1.0 - Reflected POST based Cross Site Scripting XSS in email parameter Date: 03-03-2021 CVE: CVE-2021-27321 Exploit Author: Soham Bakore Vendor Homepage: https://www.sourcecodester.com/php/14182/doctor-appointment-system.html Software Link:...
Doctor Appointment System SQL Injection Vulnerability (CNVD-2021-39522)
Doctor Appointment System is a PHP/MySQLi based doctor appointment system. A SQL injection vulnerability exists in admin.php in Doctor Appointment System 1.0, which can be exploited to insert a malicious SQL query via the username parameter on the login page...
CVE-2021-27314
SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page...
CVE-2021-27314
Summary: CVE-2021-27314 targets Doctor Appointment System 1.0 and is an unauthenticated SQL injection in login, exploited via the username parameter in admin.php. The vulnerability arises from improper input handling in PHP/MySQLi, enabling arbitrary SQL execution with high impact (CVSS v3.1: 9.8...
CVE-2021-27314: Improper Neutralization of Special Elements used in an SQL Command
SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page...
Sourcecodesterk Doctor Appointment System SQL注入漏洞
Doctor Appointment System is a PHP/MySQLi based doctor appointment system. A SQL blind injection vulnerability exists in contactus.php in Doctor Appointment System 1.0. An attacker can exploit this vulnerability to insert malicious SQL queries via the firstname parameter...
Sourcecodesterk Doctor Appointment System SQL注入漏洞
Doctor Appointment System is a PHP/MySQLi based doctor appointment system. A SQL injection vulnerability exists in admin.php in Doctor Appointment System 1.0, which can be exploited to insert a malicious SQL query via the username parameter on the login page...
Sourcecodesterk Doctor Appointment System SQL注入漏洞
Sourcecodesterk Doctor Appointment System is a Sourcecodesterk open source application. It provides an appointment scheduling feature. Doctor Appointment System version 1.0 suffers from an SQL injection vulnerability that originates from a remote blind SQL injection vulnerability in the name and...
Sourcecodesterk Doctor Appointment System SQL注入漏洞
Doctor Appointment System is a PHP/MySQLi based doctor appointment system. A SQL blind injection vulnerability exists in contactus.php in Doctor Appointment System 1.0. The vulnerability can be exploited to insert malicious SQL queries via email parameters...
Sourcecodesterk Doctor Appointment System SQL注入漏洞
Sourcecodesterk Doctor Appointment System is a Sourcecodesterk open source application. Provides an appointment function . Doctor Appointment System version 1.0 suffers from an SQL injection vulnerability that originates from a remote blind SQL injection vulnerability in the name and email...