2 matches found
Sql injection
Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the starttime and stoptime parameters in the my2sql interface...
7.5CVSS9.9AI score0.00968EPSS
SaveExploits1References3Affected Software1
Sourcecodesterk Doctor Appointment System SQL注入漏洞
Doctor Appointment System is a PHP/MySQLi based doctor appointment system. A SQL blind injection vulnerability exists in contactus.php in Doctor Appointment System 1.0. An attacker can exploit this vulnerability to insert malicious SQL queries via the firstname parameter...
7.5CVSS5.9AI score0.09299EPSS
SaveExploits3References4
20