CVE-2021-38841

CVE-2021-38841 affects Simple Water Refilling Station Management System 1.0. The vulnerability arises in the SystemLogo option on the system_info page, within classes/SystemSettings.php (update_settings action), enabling Remote Code Execution. Connected documents confirm the affected component an...

Patient Appointment Scheduler System 1.0 Cross Site Scripting

Exploit Title: Patient Appointment Scheduler System 1.0 - Persistent/Stored XSS Date: 03/09/2021 Exploit Author: a-rey Vendor Homepage: https://www.sourcecodester.com/php/14928/patient-appointment-scheduler-system-using-php-free-source-code.html Software Link:...

CVE-2021-38841: Unrestricted Upload of File with Dangerous Type

Remote Code Execution can occur in Simple Water Refilling Station Management System 1.0 via the System Logo option on the systeminfo page in classes/SystemSettings.php with an updatesettings action...

PT-2021-22296

Name of the Vulnerable Software and Affected Versions Simple Water Refilling Station Management System version 1.0 Description The issue allows for Remote Code Execution via the System Logo option on the system info page in classes/SystemSettings.php with an update settings action. Recommendation...

Patient Appointment Scheduler System 1.0 - Persistent / Stored XSS Exploit

Exploit Title: Patient Appointment Scheduler System 1.0 - Persistent/Stored XSS Exploit Author: a-rey Vendor Homepage: https://www.sourcecodester.com/php/14928/patient-appointment-scheduler-system-using-php-free-source-code.html Software Link: https://www.sourcecodester.com/download-code?nid=1492...