125 matches found
CVE-2021-30034
Cross Site Scripting XSS in Remote Clinic v2.0 via the Symptons field on patients/register-report.php...
CVE-2021-30044
CVE-2021-30044 is a Cross-Site Scripting (XSS) vulnerability in Remote Clinic v2.0 exploitable via the First Name or Last Name field on staff/register.php. The connected sources confirm the affected product and entry details, including public exploit references and multiple security databases des...
CVE-2021-30044
Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...
CVE-2021-30044
Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...
CVE-2021-30042
CVE-2021-30042 describes a stored XSS vulnerability in Remote Clinic v2.0 exploitable via the Clinic Name/Address/City/Contact fields on clinics/register.php. Multiple sources (NVD, Red Hat, CNVD, CVE List) confirm the issue and its impact to inject scripts. Public details do not provide a patche...
CVE-2021-30042
Cross Site Scripting XSS in Remote Clinic v2.0 via the "Clinic Name", "Clinic Address", "Clinic City", or "Clinic Contact" field on clinics/register.php...
CVE-2021-30042
Cross Site Scripting XSS in Remote Clinic v2.0 via the "Clinic Name", "Clinic Address", "Clinic City", or "Clinic Contact" field on clinics/register.php...
CVE-2021-30039
CVE-2021-30039 affects Remote Clinic v2.0. The vulnerability is a Cross-Site Scripting (XSS) flaw in the web form fields at patients/register-report.php, specifically the Fever and Blood Pressure fields. Root cause: inadequate input validation/sanitization allowing script injection that can execu...
CVE-2021-30039
Cross Site Scripting XSS in Remote Clinic v2.0 via the "Fever" or "Blood Pressure" field on the patients/register-report.php...
CVE-2021-30039
Cross Site Scripting XSS in Remote Clinic v2.0 via the "Fever" or "Blood Pressure" field on the patients/register-report.php...
CVE-2021-30039: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS in Remote Clinic v2.0 via the "Fever" or "Blood Pressure" field on the patients/register-report.php...
CVE-2021-30042: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS in Remote Clinic v2.0 via the "Clinic Name", "Clinic Address", "Clinic City", or "Clinic Contact" field on clinics/register.php...
CVE-2021-30030: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS in Remote Clinic v2.0 via the Full Name field on register-patient.php...
CVE-2021-30034: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS in Remote Clinic v2.0 via the Symptons field on patients/register-report.php...
PT-2021-18581
Name of the Vulnerable Software and Affected Versions Remote Clinic version 2.0 Description The issue is related to Cross Site Scripting XSS that can be exploited via the Clinic Name, Clinic Address, Clinic City, or Clinic Contact field on the "clinics/register.php" API endpoint. This allows for...
PT-2021-18582
Name of the Vulnerable Software and Affected Versions Remote Clinic version 2.0 Description The issue is related to Cross Site Scripting XSS that can be exploited via the First Name or Last Name field on the "staff/register.php" API endpoint. This allows for potential malicious script injection...
PT-2021-18578
Name of the Vulnerable Software and Affected Versions Remote Clinic version 2.0 Description The issue is related to Cross Site Scripting XSS that occurs via the Symptons field on the "patients/register-report.php" API endpoint. This allows for potential malicious script execution. Recommendations...
PT-2021-18579
Name of the Vulnerable Software and Affected Versions Remote Clinic version 2.0 Description The issue is related to Cross Site Scripting XSS that can be exploited via the Fever or Blood Pressure field on the "patients/register-report.php" API endpoint. This allows for malicious script execution...
Saad Irfan RemoteClinic 跨站脚本漏洞
Remote Clinic is an open source clinic management system that allows you to remotely manage your clinic via the Web. A cross-site scripting vulnerability exists in Remote Clinic v2.0. The vulnerability can be exploited to inject arbitrary script or html via the "Symptoms" field in...
Saad Irfan RemoteClinic 跨站脚本漏洞
Remote Clinic is an open source clinic management system that allows you to remotely manage your clinic via the Web. A cross-site scripting vulnerability exists in Remote Clinic v2.0. The vulnerability can be exploited to inject arbitrary script or html via the "fever" or "blood pressure" field i...