98 matches found
Remote Clinic Cross-Site Scripting Vulnerability (CNVD-2021-28264)
Remote Clinic is an open source clinic management system that allows you to remotely manage your clinic via the Web. A cross-site scripting vulnerability exists in Remote Clinic v2.0. An attacker can use the "clinic name", "clinic address", "clinic city", or "Clinic Contact" fields to inject...
Remote Clinic Cross-Site Scripting Vulnerability (CNVD-2021-28263)
Remote Clinic is an open source clinic management system that allows you to remotely manage your clinic via the Web. A cross-site scripting vulnerability exists in Remote Clinic v2.0. The vulnerability can be exploited to inject arbitrary script or html via the "Symptoms" field in...
Remote Clinic Cross-Site Scripting Vulnerability (CNVD-2021-28262)
Remote Clinic is an open source clinic management system that allows you to remotely manage your clinic via the Web. A cross-site scripting vulnerability exists in Remote Clinic v2.0. The vulnerability can be exploited to inject arbitrary script or html via the "fever" or "blood pressure" field i...
CVE-2021-30030
CVE-2021-30030 affects Remote Clinic v2.0. The vulnerability is a Cross-Site Scripting (XSS) in the Full Name field of register-patient.php, demonstrated as stored XSS (examples use payloads like XSS">
CVE-2021-30030
Cross Site Scripting XSS in Remote Clinic v2.0 via the Full Name field on register-patient.php...
CVE-2021-30034
Cross Site Scripting XSS in Remote Clinic v2.0 via the Symptons field on patients/register-report.php...
CVE-2021-30034
Affected software: Remote Clinic UI v2.0 (Remote Clinic v2.0)\nVulnerability: Stored cross-site scripting (XSS) in the Symptoms field on patients/register-report.php, enabling injected script execution via user-provided input.\nRoot cause / vector: Malicious input stored in the Symptoms field is ...
CVE-2021-30044
Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...
CVE-2021-30044
CVE-2021-30044 is a Cross-Site Scripting (XSS) vulnerability in Remote Clinic v2.0 exploitable via the First Name or Last Name field on staff/register.php. The connected sources confirm the affected product and entry details, including public exploit references and multiple security databases des...
CVE-2021-30042
Cross Site Scripting XSS in Remote Clinic v2.0 via the "Clinic Name", "Clinic Address", "Clinic City", or "Clinic Contact" field on clinics/register.php...
CVE-2021-30042
CVE-2021-30042 describes a stored XSS vulnerability in Remote Clinic v2.0 exploitable via the Clinic Name/Address/City/Contact fields on clinics/register.php. Multiple sources (NVD, Red Hat, CNVD, CVE List) confirm the issue and its impact to inject scripts. Public details do not provide a patche...
CVE-2021-30039
CVE-2021-30039 affects Remote Clinic v2.0. The vulnerability is a Cross-Site Scripting (XSS) flaw in the web form fields at patients/register-report.php, specifically the Fever and Blood Pressure fields. Root cause: inadequate input validation/sanitization allowing script injection that can execu...
CVE-2021-30039
Cross Site Scripting XSS in Remote Clinic v2.0 via the "Fever" or "Blood Pressure" field on the patients/register-report.php...
Saad Irfan RemoteClinic 跨站脚本漏洞
Remote Clinic is an open source clinic management system that allows you to remotely manage your clinic via the Web. A cross-site scripting vulnerability exists in Remote Clinic v2.0. The vulnerability can be exploited to inject arbitrary script or html via the "Symptoms" field in...
Saad Irfan RemoteClinic 跨站脚本漏洞
Remote Clinic is an open source clinic management system that allows you to remotely manage your clinic via the Web. A cross-site scripting vulnerability exists in Remote Clinic v2.0. The vulnerability can be exploited to inject arbitrary script or html via the "full name" field of...
Saad Irfan RemoteClinic 跨站脚本漏洞
Remote Clinic is an open source clinic management system that allows you to remotely manage your clinic via the Web. A cross-site scripting vulnerability exists in Remote Clinic v2.0. The vulnerability can be exploited to inject arbitrary script or html via the First Name or Last Name field of...
Saad Irfan RemoteClinic 跨站脚本漏洞
Remote Clinic is an open source clinic management system that allows you to remotely manage your clinic via the Web. A cross-site scripting vulnerability exists in Remote Clinic v2.0. An attacker can use the "clinic name", "clinic address", "clinic city", or "Clinic Contact" fields to inject...
Saad Irfan RemoteClinic 跨站脚本漏洞
Remote Clinic is an open source clinic management system that allows you to remotely manage your clinic via the Web. A cross-site scripting vulnerability exists in Remote Clinic v2.0. The vulnerability can be exploited to inject arbitrary script or html via the "fever" or "blood pressure" field i...