Microsoft PC Manager 后置链接漏洞

Microsoft PC Manager is a computer management software from Microsoft USA that allows one-click acceleration, system space management, pop-up window management, and full health check. Microsoft PC Manager suffers from a backlink vulnerability. An attacker can exploit this vulnerability to elevate...

CVE-2024-50589

The software HASOMED Elefant (versions prior to 24.04.00 ) and Elefant Software Updater (versions prior to 1.4.2.1811 ) are vulnerable to an authentication bypass. An unauthenticated attacker with access to the local network can query an unprotected Fast Healthcare Interoperability Resources (FHI...

CVE-2024-50589 Unprotected FHIR API

An unauthenticated attacker with access to the local network of the medical office can query an unprotected Fast Healthcare Interoperability Resources FHIR API to get access to sensitive electronic health records EHR...

CVE-2024-50589 Unprotected FHIR API

An unauthenticated attacker with access to the local network of the medical office can query an unprotected Fast Healthcare Interoperability Resources FHIR API to get access to sensitive electronic health records EHR...

CVE-2024-10988

A vulnerability was found in code-projects E-Health Care System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Doctor/doctorlogin.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The...

CVE-2024-10987

A vulnerability was found in code-projects E-Health Care System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Doctor/userappointment.php. The manipulation of the argument scheduleid/scheduledate/scheduleday/starttime/endtime/booking...

CVE-2024-10989

A vulnerability classified as critical has been found in code-projects E-Health Care System 1.0. This affects an unknown part of the file /Admin/detail.php. The manipulation of the argument sid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

CVE-2024-10987

A vulnerability was found in code-projects E-Health Care System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Doctor/userappointment.php. The manipulation of the argument scheduleid/scheduledate/scheduleday/starttime/endtime/booking...

CVE-2024-10988

A vulnerability was found in code-projects E-Health Care System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Doctor/doctorlogin.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The...

CVE-2024-10989

A vulnerability classified as critical has been found in code-projects E-Health Care System 1.0. This affects an unknown part of the file /Admin/detail.php. The manipulation of the argument sid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

CVE-2024-10989 code-projects E-Health Care System detail.php sql injection

A vulnerability classified as critical has been found in code-projects E-Health Care System 1.0. This affects an unknown part of the file /Admin/detail.php. The manipulation of the argument sid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

CVE-2024-10989 code-projects E-Health Care System detail.php sql injection

A vulnerability classified as critical has been found in code-projects E-Health Care System 1.0. This affects an unknown part of the file /Admin/detail.php. The manipulation of the argument sid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

CVE-2024-10989

CVE-2024-10989 affects code-projects E-Health Care System 1.0. The issue is a SQL injection in the /Admin/detail.php file caused by unsafely processing the s_id parameter, enabling remote exploitation. Multiple connected sources confirm the vulnerable component and the impact, with no public deta...

CVE-2024-10988 code-projects E-Health Care System doctor_login.php sql injection

A vulnerability was found in code-projects E-Health Care System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Doctor/doctorlogin.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The...

CVE-2024-10988

The CVE-2024-10988 entry affects code-projects E-Health Care System v1.0, where the vulnerability lies in the file /Doctor/doctor_login.php. The root cause is improper handling of the email parameter, enabling SQL injection that can be triggered remotely and may affect multiple parameters. Severa...

CVE-2024-10988 code-projects E-Health Care System doctor_login.php sql injection

A vulnerability was found in code-projects E-Health Care System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Doctor/doctorlogin.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The...

CVE-2024-10987

Affected software: Code-Projects E-Health Care System 1.0. Vulnerable component: /Doctor/user_appointment.php, where manipulation of parameters schedule_id, schedule_date, schedule_day, start_time, end_time, or booking leads to SQL injection. Attack vector: remote. Exploit status: publicly disclo...

CVE-2024-10987 code-projects E-Health Care System user_appointment.php sql injection

A vulnerability was found in code-projects E-Health Care System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Doctor/userappointment.php. The manipulation of the argument scheduleid/scheduledate/scheduleday/starttime/endtime/booking...

CVE-2024-10987 code-projects E-Health Care System user_appointment.php sql injection

A vulnerability was found in code-projects E-Health Care System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Doctor/userappointment.php. The manipulation of the argument scheduleid/scheduledate/scheduleday/starttime/endtime/booking...

Code-Projects E-Health Care System 注入漏洞

Code-Projects E-Health Care System is a Code-Projects open source e-health care system. An injection vulnerability exists in Code-Projects E-Health Care System version 1.0, which stems from the parameter email in the file /Doctor/doctorlogin.php can lead to SQL injection...