Lucene search
+L

294 matches found

Positive Technologies
Positive Technologies
added 2022/09/02 12:00 a.m.9 views

PT-2022-23503 · Unknown · Clinic'S Patient Management System

Name of the Vulnerable Software and Affected Versions: Clinic's Patient Management System version 1.0 Description: A SQL injection issue was found in the system, specifically via the id parameter at the "/pms/update patient.php" API endpoint. Recommendations: For Clinic's Patient Management Syste...

9.8CVSS7.9AI score0.00655EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/09/02 12:00 a.m.13 views

Clinic’s Patient Management System SQL注入漏洞

Clinic's Patient Management System is a patient management system for clinics. a SQL injection vulnerability exists in Clinic's Patient Management System v1.0, which originates in /pms/ The id parameter in updatepatient.php lacks validation for external input SQL statements. An attacker could use...

9.8CVSS8.2AI score0.00655EPSS
SaveExploits0References2
NVD
NVD
added 2022/08/22 1:15 a.m.17 views

CVE-2022-36251

Clinic's Patient Management System v1.0 is vulnerable to Cross Site Scripting XSS via patients.php...

6.1CVSS0.0057EPSS
SaveExploits1References1
OSV
OSV
added 2022/08/22 1:15 a.m.7 views

CVE-2022-36251

Clinic's Patient Management System v1.0 is vulnerable to Cross Site Scripting XSS via patients.php...

6.1CVSS5.8AI score0.0057EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/08/22 1:15 a.m.4 views

CVE-2022-36251

Clinic's Patient Management System v1.0 is vulnerable to Cross Site Scripting XSS via patients.php...

6.1CVSS6.4AI score0.0057EPSS
SaveExploits1References2
Prion
Prion
added 2022/08/22 1:15 a.m.12 views

Cross site scripting

Clinic's Patient Management System v1.0 is vulnerable to Cross Site Scripting XSS via patients.php...

5.8CVSS6AI score0.0057EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/08/22 12:37 a.m.25 views

CVE-2022-36251

Clinic's Patient Management System v1.0 is vulnerable to Cross Site Scripting XSS via patients.php...

6.2AI score0.0057EPSS
SaveExploits1References1
CVE
CVE
added 2022/08/22 12:37 a.m.68 views

CVE-2022-36251

CVE-2022-36251 affects Clinic's Patient Management System v1.0 with a Cross Site Scripting (XSS) vulnerability in patients.php. The issue arises from improper handling of input, enabling injection of scripts by an attacker. CVSSv3.1 base score 6.1 (Medium) with network attack vector, low attack c...

6.1CVSS6AI score0.0057EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/08/22 12:00 a.m.6 views

PT-2022-23272 · Unknown · Clinic'S Patient Management System

Name of the Vulnerable Software and Affected Versions: Clinic's Patient Management System version 1.0 Description: The issue is related to Cross Site Scripting XSS via the patients.php file. This means that an attacker could potentially inject malicious scripts into the website, which could then ...

6.1CVSS5.7AI score0.0057EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/08/21 12:00 a.m.11 views

Clinic’s Patient Management System 跨站脚本漏洞

Clinic's Patient Management System is a patient management system for a clinic by Carlo Montero. A security vulnerability exists in Clinic's Patient Management System version v1.0, which stems from a cross-site scripting XSS vulnerability in patient.php...

6.1CVSS5.8AI score0.0057EPSS
SaveExploits1References3
NVD
NVD
added 2022/08/17 6:15 p.m.17 views

CVE-2022-35117

Clinic's Patient Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via updatemedicinedetails.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Packing text box under the Update Medical...

4.8CVSS0.00551EPSS
SaveExploits1References1
OSV
OSV
added 2022/08/17 6:15 p.m.8 views

CVE-2022-35117

Clinic's Patient Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via updatemedicinedetails.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Packing text box under the Update Medical...

4.8CVSS5.9AI score0.00551EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/08/17 6:15 p.m.2 views

CVE-2022-35117

Clinic's Patient Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via updatemedicinedetails.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Packing text box under the Update Medical...

4.8CVSS6AI score0.00551EPSS
SaveExploits1References2
Prion
Prion
added 2022/08/17 6:15 p.m.16 views

Cross site scripting

Clinic's Patient Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via updatemedicinedetails.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Packing text box under the Update Medical...

4.3CVSS5AI score0.00551EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/08/17 5:35 p.m.64 views

CVE-2022-35117

CVE-2022-35117 affects Clinic's Patient Management System v1.0. The vulnerability is a cross-site scripting (XSS) flaw exploitable via update_medicine_details.php, where an attacker can inject a crafted payload into the Packing text box in the Update Medical Details module to execute arbitrary we...

4.8CVSS5AI score0.00551EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/08/17 5:35 p.m.28 views

CVE-2022-35117

Clinic's Patient Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via updatemedicinedetails.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Packing text box under the Update Medical...

5.3AI score0.00551EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/08/17 12:00 a.m.7 views

Clinic’s Patient Management System 跨站脚本漏洞

Clinic's Patient Management System is a patient management system for a clinic by Carlo Montero. A security vulnerability exists in Clinic's Patient Management System version v1.0, which originates from a cross-site scripting XSS vulnerability contained via updatemedicinedetails.php that allows a...

4.8CVSS5.5AI score0.00551EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/08/16 6:15 p.m.5 views

CVE-2022-36242

Clinic's Patient Management System v1.0 is vulnerable to SQL Injection via /pms/updatemedicine.php?id=...

9.8CVSS7.5AI score0.00854EPSS
SaveExploits0References2
NVD
NVD
added 2022/08/16 6:15 p.m.18 views

CVE-2022-36242

Clinic's Patient Management System v1.0 is vulnerable to SQL Injection via /pms/updatemedicine.php?id=...

9.8CVSS0.00854EPSS
SaveExploits0References1
OSV
OSV
added 2022/08/16 6:15 p.m.6 views

CVE-2022-36242

Clinic's Patient Management System v1.0 is vulnerable to SQL Injection via /pms/updatemedicine.php?id=...

9.8CVSS5.8AI score0.00854EPSS
SaveExploits0References1
Rows per page
Query Builder