Cross site scripting

An issue was discovered in Online Diagnostic Lab Management System 1.0. There is a stored XSS vulnerability via firstname, address, middlename, lastname , gender, email, contact parameters...

Sql injection

An issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection vulnerability via "dob" parameter in "/classes/Users.php?f=saveclient"...

Design/Logic Flaw

There is an unauthorized access vulnerability in Online Diagnostic Lab Management System 1.0...

CVE-2022-37151

There is an unauthorized access vulnerability in Online Diagnostic Lab Management System 1.0...

CVE-2022-37151

Technical details about CVE-2022-37151 are not provided in the connected documents. Monitor for updates from vendor advisories and security bulletins to obtain affected components, impact, and remediation.

CVE-2022-37152

An issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection vulnerability via "dob" parameter in "/classes/Users.php?f=saveclient"...

CVE-2022-37152

CVE-2022-37152 affects Online Diagnostic Lab Management System 1.0. The issue is a SQL injection via the dob parameter in /classes/Users.php?f=save_client, with CVSS 3.1 base score 9.8 (CRITICAL) affecting confidentiality, integrity, and availability. The provided documents do not specify root-ca...

CVE-2022-37150

An XSS vulnerability (stored) affects Online Diagnostic Lab Management System 1.0 (CVE-2022-37150). The issue is triggered via user-input fields including firstname, address, middlename, lastname, gender, email, and contact, indicating improper sanitization of inputs stored and later reflected. T...

CVE-2022-37150

An issue was discovered in Online Diagnostic Lab Management System 1.0. There is a stored XSS vulnerability via firstname, address, middlename, lastname , gender, email, contact parameters...

Online Diagnostic Lab Management System Cross-site Scripting Vulnerabilities

Online Diagnostic Lab Management System is an online diagnostic lab management system. A cross-site scripting vulnerability exists in Online Diagnostic Lab Management System version 1.0, which originates from an XSS via the firstname, address, middlename, lastname , gender, email, contact...

PT-2022-23841

Name of the Vulnerable Software and Affected Versions Online Diagnostic Lab Management System version 1.0 Description The issue is related to unauthorized access. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where th...

PT-2022-23842

Name of the Vulnerable Software and Affected Versions Online Diagnostic Lab Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the dob parameter in the "/classes/Users.php?f=save client" API endpoint...

CVE-2022-37150: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Online Diagnostic Lab Management System 1.0. There is a stored XSS vulnerability via firstname, address, middlename, lastname , gender, email, contact parameters...

Online Diagnostic Lab Management System SQL Injection Vulnerability

Online Diagnostic Lab Management System is an online diagnostic lab management system. A SQL injection vulnerability exists in Online Diagnostic Lab Management System version 1.0, which originates from a SQL injection vulnerability via the dob parameter in /classes/Users.php?f=saveclient...

Online Diagnostic Lab Management System security vulnerabilities

Online Diagnostic Lab Management System is an online diagnostic lab management system. A security vulnerability exists in Online Diagnostic Lab Management System version 1.0, which originates from the presence of unauthorized access...

CVE-2022-37152: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection vulnerability via "dob" parameter in "/classes/Users.php?f=saveclient"...

PT-2022-23840

Name of the Vulnerable Software and Affected Versions Online Diagnostic Lab Management System version 1.0 Description The issue is related to a stored XSS vulnerability. This vulnerability can be exploited via parameters such as firstname, address, middlename, lastname, gender, email, and contact...

CVE-2022-37151: Undefined Security Weakness

There is an unauthorized access vulnerability in Online Diagnostic Lab Management System 1.0...

GitHub Security Lab: [JAVA]: Partial Path Traversal

This bug was reported directly to GitHub Security Lab...

CVE-2021-32862

The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting XSS vulnerabilities if the...