14 matches found
CVE-2026-37600: Improper Neutralization of Special Elements used in an SQL Command
SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/appointments/viewdetails.php...
CVE-2026-37598: Improper Neutralization of Special Elements used in an SQL Command
SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to arbitrary code execution RCE via /scheduler/classes/SystemSettings.php?f=updatesettings...
CVE-2026-37602: Improper Neutralization of Special Elements used in an SQL Command
SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/user/manageuser.php...
CVE-2026-37601: Improper Neutralization of Special Elements used in an SQL Command
SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/appointments/manageappointment.php...
Patient Appointment Scheduler System SQL Injection Vulnerability
Patient Appointment Scheduler System is a patient appointment scheduling system project. It provides an online platform for clinic patients or potential patients to schedule appointments with physicians. patient Appointment Scheduler System version 1.0 contains a SQL injection vulnerability that...
CVE-2021-41660
SQL injection vulnerability in Sourcecodester Patient Appointment Scheduler System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password fields to login.php...
Sql injection
SQL injection vulnerability in Sourcecodester Patient Appointment Scheduler System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password fields to login.php...
CVE-2021-41660
The CVE-2021-41660 entry relates to a SQL injection in Sourcecodester Patient Appointment Scheduler System v1 (author oretnom23). The vulnerability is triggered through unsanitized input in the login.php username and password fields, allowing an attacker to execute arbitrary SQL commands. Public ...
CVE-2021-41660: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Sourcecodester Patient Appointment Scheduler System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password fields to login.php...
PT-2022-11457
Name of the Vulnerable Software and Affected Versions Sourcecodester Patient Appointment Scheduler System version 1 Description The issue allows attackers to execute arbitrary SQL commands via the username and password fields to "login.php" API endpoint. This enables unauthorized access and...
Patient Appointment Scheduler System SQL注入漏洞
Patient Appointment Scheduler System is a patient appointment scheduling system project. It provides an online platform for clinic patients or potential patients to schedule appointments with physicians. patient Appointment Scheduler System version 1.0 contains a SQL injection vulnerability that...
Patient Appointment Scheduler System 1.0 - Unauthenticated File Upload & Remote Code Execution
Exploit Title: Patient Appointment Scheduler System 1.0 - Unauthenticated File Upload & Remote Code Execution RCE Exploit Author: a-rey Vendor Homepage: https://www.sourcecodester.com/php/14928/patient-appointment-scheduler-system-using-php-free-source-code.html Software Link:...
Patient Appointment Scheduler System 1.0 - Unauthenticated File Upload
Exploit Title: Patient Appointment Scheduler System 1.0 - Unauthenticated File Upload Date: 03/09/2021 Exploit Author: a-rey Vendor Homepage: https://www.sourcecodester.com/php/14928/patient-appointment-scheduler-system-using-php-free-source-code.html Software Link:...
