Lucene search
K

124 matches found

OSV
OSV
added 2025/12/08 6:15 p.m.3 views

CVE-2025-64081

SQL injection vulnerability in /php/apipatientschedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter...

9.8CVSS6.1AI score0.00351EPSS
Exploits3References2
NVD
NVD
added 2025/12/08 6:15 p.m.4 views

CVE-2025-64081

SQL injection vulnerability in /php/apipatientschedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter...

9.8CVSS0.00351EPSS
Exploits3References2
CNNVD
CNNVD
added 2025/12/08 12:0 a.m.2 views

SourceCodester Patients Waiting Area Queue Management System SQL注入漏洞

SourceCodester Patients Waiting Area Queue Management System is SourceCodester open source a patient waiting area queue management system. SourceCodester Patients Waiting Area Queue Management System v1 version exists SQL injection vulnerability , the vulnerability stems from /...

9.8CVSS7.7AI score0.00351EPSS
Exploits3References3
CVE
CVE
added 2025/12/08 12:0 a.m.11 views

CVE-2025-64081

CVE-2025-64081 is a SQL injection in SourceCodester’s Patients Waiting Area Queue Management System v1, affecting the file /php/api_patient_schedule.php via the appointmentID parameter. The root cause is improper input validation/sanitization, enabling attackers to execute arbitrary SQL commands....

9.8CVSS8.2AI score0.00351EPSS
Exploits3References2Affected Software1
Cvelist
Cvelist
added 2025/12/08 12:0 a.m.20 views

CVE-2025-64081

SQL injection vulnerability in /php/apipatientschedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter...

0.00351EPSS
Exploits3References2
RedhatCVE
RedhatCVE
added 2025/11/17 11:13 a.m.10 views

CVE-2025-13248

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown function of the file /php/apipatientschedule.php. This manipulation of the argument appointmentID causes sql injection. The attack can be initiated remotely. The...

9.8CVSS7.4AI score0.00335EPSS
Exploits1References1
OSV
OSV
added 2025/11/16 11:15 a.m.3 views

CVE-2025-13248

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown function of the file /php/apipatientschedule.php. This manipulation of the argument appointmentID causes sql injection. The attack can be initiated remotely. The...

9.8CVSS5.8AI score0.00335EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/11/16 11:2 a.m.3 views

CVE-2025-13248 SourceCodester Patients Waiting Area Queue Management System api_patient_schedule.php sql injection

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown function of the file /php/apipatientschedule.php. This manipulation of the argument appointmentID causes sql injection. The attack can be initiated remotely. The...

7.5CVSS7.2AI score0.00335EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/11/16 12:0 a.m.2 views

SourceCodester Patients Waiting Area Queue Management System SQL注入漏洞

SourceCodester Patients Waiting Area Queue Management System is a SourceCodester open source patient waiting area queue management system. A SQL injection vulnerability exists in SourceCodester Patients Waiting Area Queue Management System version 1.0, which stems from incorrect manipulation of t...

9.8CVSS7.8AI score0.00335EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/11/16 12:0 a.m.5 views

PT-2025-47083

Name of the Vulnerable Software and Affected Versions SourceCodester Patients Waiting Area Queue Management System version 1.0 Description A flaw exists in SourceCodester Patients Waiting Area Queue Management System 1.0. The issue involves SQL injection stemming from manipulation of the...

9.8CVSS7.5AI score0.00335EPSS
Exploits1References12
NVD
NVD
added 2025/11/13 6:15 p.m.2 views

CVE-2025-13122

A vulnerability was detected in SourceCodester Patients Waiting Area Queue Management System 1.0. The affected element is the function getPatientAppointment of the file /php/apipatientcheckin.php. Performing manipulation of the argument appointmentID results in sql injection. It is possible to...

9.8CVSS0.00382EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/11/13 6:2 p.m.4 views

CVE-2025-13122 SourceCodester Patients Waiting Area Queue Management System api_patient_checkin.php getPatientAppointment sql injection

A vulnerability was detected in SourceCodester Patients Waiting Area Queue Management System 1.0. The affected element is the function getPatientAppointment of the file /php/apipatientcheckin.php. Performing manipulation of the argument appointmentID results in sql injection. It is possible to...

7.5CVSS7.3AI score0.00382EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/11/08 12:55 a.m.8 views

CVE-2025-63718

A SQL injection vulnerability exists in the SourceCodester PQMS Patient Queue Management System 1.0 in the apipatientschedule.php endpoint. The appointmentID parameter is not properly sanitized, allowing attackers to execute arbitrary SQL commands...

6.5CVSS8.5AI score0.0021EPSS
Exploits1References1
OSV
OSV
added 2025/11/07 6:15 p.m.2 views

CVE-2025-63718

A SQL injection vulnerability exists in the SourceCodester PQMS Patient Queue Management System 1.0 in the apipatientschedule.php endpoint. The appointmentID parameter is not properly sanitized, allowing attackers to execute arbitrary SQL commands...

6.5CVSS6.1AI score0.0021EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/11/07 12:0 a.m.6 views

CVE-2025-63718

A SQL injection vulnerability exists in the SourceCodester PQMS Patient Queue Management System 1.0 in the apipatientschedule.php endpoint. The appointmentID parameter is not properly sanitized, allowing attackers to execute arbitrary SQL commands...

0.0021EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/11/07 12:0 a.m.4 views

PT-2025-45480

Name of the Vulnerable Software and Affected Versions SourceCodester PQMS version 1.0 Description A SQL injection issue exists in the Patient Queue Management System. The api patient schedule.php endpoint is affected because the appointmentID parameter does not receive proper sanitization,...

8.1AI score0.0021EPSS
Exploits1References6
CVE
CVE
added 2025/11/07 12:0 a.m.11 views

CVE-2025-63718

The CVE-2025-63718 entry describes a SQL injection in SourceCodester PQMS 1.0 at api_patient_schedule.php, where the appointmentID parameter is not properly sanitized, enabling arbitrary SQL commands. This is evidenced across multiple connected sources (e.g., Red Hat, EUVD, NVD/CVE records, CNVD,...

6.5CVSS8.1AI score0.0021EPSS
Exploits1References2Affected Software1
EUVD
EUVD
added 2025/10/22 3:31 p.m.6 views

EUVD-2023-60034

In the Linux kernel, the following vulnerability has been resolved: riscv: ftrace: Fixup panic by disabling preemption In RISCV, we must use an AUIPC + JALR pair to encode an immediate, forming a jump that jumps to an address over 4K. This may cause errors if we want to enable kernel preemption a...

5.8AI score0.00193EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-26554

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00616EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-53835

Malicious code in bioql PyPI...

5.5CVSS7.3AI score0.002EPSS
Exploits0References4
Rows per page
Query Builder