CVE-2022-37151

There is an unauthorized access vulnerability in Online Diagnostic Lab Management System 1.0...

CVE-2022-37151

Technical details about CVE-2022-37151 are not provided in the connected documents. Monitor for updates from vendor advisories and security bulletins to obtain affected components, impact, and remediation.

CVE-2022-37152

CVE-2022-37152 affects Online Diagnostic Lab Management System 1.0. The issue is a SQL injection via the dob parameter in /classes/Users.php?f=save_client, with CVSS 3.1 base score 9.8 (CRITICAL) affecting confidentiality, integrity, and availability. The provided documents do not specify root-ca...

CVE-2022-37150

An issue was discovered in Online Diagnostic Lab Management System 1.0. There is a stored XSS vulnerability via firstname, address, middlename, lastname , gender, email, contact parameters...

CVE-2022-37150

An XSS vulnerability (stored) affects Online Diagnostic Lab Management System 1.0 (CVE-2022-37150). The issue is triggered via user-input fields including firstname, address, middlename, lastname, gender, email, and contact, indicating improper sanitization of inputs stored and later reflected. T...

CVE-2022-37151: Undefined Security Weakness

There is an unauthorized access vulnerability in Online Diagnostic Lab Management System 1.0...

Online Diagnostic Lab Management System SQL注入漏洞

Online Diagnostic Lab Management System is an online diagnostic lab management system. A SQL injection vulnerability exists in Online Diagnostic Lab Management System version 1.0, which originates from a SQL injection vulnerability via the dob parameter in /classes/Users.php?f=saveclient...

PT-2022-23842

Name of the Vulnerable Software and Affected Versions Online Diagnostic Lab Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the dob parameter in the "/classes/Users.php?f=save client" API endpoint...

PT-2022-23841

Name of the Vulnerable Software and Affected Versions Online Diagnostic Lab Management System version 1.0 Description The issue is related to unauthorized access. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where th...

CVE-2022-37150: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Online Diagnostic Lab Management System 1.0. There is a stored XSS vulnerability via firstname, address, middlename, lastname , gender, email, contact parameters...

PT-2022-23840

Name of the Vulnerable Software and Affected Versions Online Diagnostic Lab Management System version 1.0 Description The issue is related to a stored XSS vulnerability. This vulnerability can be exploited via parameters such as firstname, address, middlename, lastname, gender, email, and contact...

CVE-2022-37152: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection vulnerability via "dob" parameter in "/classes/Users.php?f=saveclient"...

Online Diagnostic Lab Management System 1.0 - SQL Injection Vulnerability

Exploit Title: Online Diagnostic Lab Management System 1.0 - SQL Injection Unauthenticated Exploit Author: Himash Vendor Homepage: https://www.sourcecodester.com/php/15129/online-diagnostic-lab-management-system-php-free-source-code.html Software Link:...

Online Diagnostic Lab Management System 1.0 Cross Site Scripting

Exploit Title: Online Diagnostic Lab Management System 1.0 - Stored Cross Site Scripting XSS Date: 11/01/2022 Exploit Author: Himash Vendor Homepage: https://www.sourcecodester.com/php/15129/online-diagnostic-lab-management-system-php-free-source-code.html Software Link:...