Lucene search
+L

179 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/19 12:00 a.m.•7 views

CVE-2026-1148: Cross-Site Request Forgery (CSRF)

A vulnerability was determined in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. This vulnerability affects unknown code. Executing a manipulation can lead to cross-site request forgery. It is possible to launch the attack remotely...

6.5CVSS5.2AI score0.00247EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/19 12:00 a.m.•10 views

CVE-2026-1147: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. This affects an unknown part of the file /php/apipatientschedule.php. Performing a manipulation of the argument Reason results in cross site scripting. It is possible to initiate the attac...

5.4CVSS3.7AI score0.00281EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/19 12:00 a.m.•11 views

CVE-2026-1146: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this issue is some unknown functionality of the file /php/apiregisterpatient.php. Such manipulation of the argument firstName/lastName leads to cross site scripting. The...

5.4CVSS3.3AI score0.0021EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/19 12:00 a.m.•23 views

PT-2026-3431

A vulnerability was determined in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. This vulnerability affects unknown code. Executing a manipulation can lead to cross-site request forgery. It is possible to launch the attack remotely...

5.3CVSS5.2AI score0.00247EPSS
SaveExploits0References4
NVD
NVD
•added 2025/12/24 1:16 p.m.•18 views

CVE-2023-54159

In the Linux kernel, the following vulnerability has been resolved: usb: mtu3: fix kernel panic at qmu transfer done irq handler When handle qmu transfer irq, it will unlock @mtu-lock before give back request, if another thread handle disconnect event at the same time, and try to disable ep, it m...

0.00205EPSS
SaveExploits0References7
osv_ubuntu
osv_ubuntu
•added 2025/12/24 1:16 p.m.•18 views

UBUNTU-CVE-2023-54159

In the Linux kernel, the following vulnerability has been resolved: usb: mtu3: fix kernel panic at qmu transfer done irq handler When handle qmu transfer irq, it will unlock @mtu-lock before give back request, if another thread handle disconnect event at the same time, and try to disable ep, it m...

5.9AI score0.00205EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
•added 2025/12/15 12:00 a.m.•17 views

AMD GPU DRI Heap Buffer Overflow DoS

The vulnerability of the pqmcleanqueueresource function in the drivers/gpu/drm/amd/amdkfd/kfdprocessqueuemanager.c file, a driver for AMD Direct Rendering Infrastructure DRI support in Linux operating systems, is related to pointer manipulation. Exploiting this vulnerability could allow an attack...

5.5CVSS6.6AI score0.00185EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
•added 2025/12/08 6:30 p.m.•21 views

EUVD-2025-201798

SQL injection vulnerability in /php/apipatientschedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter...

9.8CVSS6.6AI score0.00408EPSS
SaveExploits3References3
osv_cve
osv_cve
•added 2025/12/08 6:15 p.m.•17 views

CVE-2025-64081

SQL injection vulnerability in /php/apipatientschedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter...

9.8CVSS6.6AI score0.00408EPSS
SaveExploits3References2
NVD
NVD
•added 2025/12/08 6:15 p.m.•22 views

CVE-2025-64081

SQL injection vulnerability in /php/apipatientschedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter...

9.8CVSS0.00408EPSS
SaveExploits3References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/08 12:00 a.m.•7 views

CVE-2025-64081: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in /php/apipatientschedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter...

9.8CVSS6.6AI score0.00408EPSS
SaveExploits3References2
CVE
CVE
•added 2025/12/08 12:00 a.m.•35 views

CVE-2025-64081

CVE-2025-64081 is a SQL injection in SourceCodester’s Patients Waiting Area Queue Management System v1, affecting the file /php/api_patient_schedule.php via the appointmentID parameter. The root cause is improper input validation/sanitization, enabling attackers to execute arbitrary SQL commands....

9.8CVSS6.6AI score0.00408EPSS
SaveExploits3References2Affected Software1
CNNVD
CNNVD
•added 2025/12/08 12:00 a.m.•22 views

SourceCodester: Patients Waiting Area Queue Management System SQL Injection Vulnerability

SourceCodester Patients Waiting Area Queue Management System is SourceCodester open source a patient waiting area queue management system. SourceCodester Patients Waiting Area Queue Management System v1 version exists SQL injection vulnerability , the vulnerability stems from /...

9.8CVSS5.8AI score0.00408EPSS
SaveExploits3References3
Cvelist
Cvelist
•added 2025/12/08 12:00 a.m.•50 views

CVE-2025-64081

SQL injection vulnerability in /php/apipatientschedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter...

0.00408EPSS
SaveExploits3References2
RedhatCVE
RedhatCVE
•added 2025/11/17 11:13 a.m.•30 views

CVE-2025-13248

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown function of the file /php/apipatientschedule.php. This manipulation of the argument appointmentID causes sql injection. The attack can be initiated remotely. The...

9.8CVSS7.1AI score0.00415EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/11/16 11:15 a.m.•17 views

CVE-2025-13248

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown function of the file /php/apipatientschedule.php. This manipulation of the argument appointmentID causes sql injection. The attack can be initiated remotely. The...

9.8CVSS7.1AI score0.00415EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/11/16 11:02 a.m.•14 views

CVE-2025-13248 SourceCodester Patients Waiting Area Queue Management System api_patient_schedule.php sql injection

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown function of the file /php/apipatientschedule.php. This manipulation of the argument appointmentID causes sql injection. The attack can be initiated remotely. The...

7.5CVSS7.1AI score0.00415EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/11/16 12:00 a.m.•26 views

PT-2025-47083

Name of the Vulnerable Software and Affected Versions SourceCodester Patients Waiting Area Queue Management System version 1.0 Description A flaw exists in SourceCodester Patients Waiting Area Queue Management System 1.0. The issue involves SQL injection stemming from manipulation of the...

9.8CVSS7.2AI score0.00415EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/16 12:00 a.m.•8 views

CVE-2025-13248: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown function of the file /php/apipatientschedule.php. This manipulation of the argument appointmentID causes sql injection. The attack can be initiated remotely. The...

9.8CVSS7.1AI score0.00415EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/11/16 12:00 a.m.•24 views

SourceCodester: Patients Waiting Area Queue Management System SQL Injection Vulnerability

SourceCodester Patients Waiting Area Queue Management System is a SourceCodester open source patient waiting area queue management system. A SQL injection vulnerability exists in SourceCodester Patients Waiting Area Queue Management System version 1.0, which stems from incorrect manipulation of t...

9.8CVSS7.1AI score0.00415EPSS
SaveExploits1References6
Rows per page
Query Builder