Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/12/12 1:06 a.m.•15 views

CVE-2025-66918

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting XSS in admin/add-session.php via the "title" parameter...

8.8CVSS6.3AI score0.00564EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/12/11 6:16 p.m.•22 views

CVE-2025-66918

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting XSS in admin/add-session.php via the "title" parameter...

8.8CVSS5.8AI score0.00564EPSS
SaveExploits1References2
CVE
CVE
•added 2025/12/11 12:00 a.m.•36 views

CVE-2025-66918

edoc-doctor-appointment-system v1.0.1 is vulnerable to a Cross Site Scripting (XSS) flaw in the admin/add-session.php component. The root cause is an unfiltered "title" parameter, which allows an attacker to inject malicious scripts into the web page. Practical consequences include the execution ...

8.8CVSS5.8AI score0.00564EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/11 12:00 a.m.•18 views

PT-2025-50648

Name of the Vulnerable Software and Affected Versions edoc-doctor-appointment-system version 1.0.1 Description The edoc-doctor-appointment-system software is affected by a Cross Site Scripting XSS issue. This issue occurs in the 'admin/add-session.php' component through the title parameter...

8.8CVSS6.2AI score0.00564EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/11 12:00 a.m.•51 views

CVE-2025-66918

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting XSS in admin/add-session.php via the "title" parameter...

0.00564EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/12/11 12:00 a.m.•18 views

EUVD-2025-202753

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting XSS in admin/add-session.php via the "title" parameter...

8.8CVSS5.7AI score0.00564EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/12/11 12:00 a.m.•18 views

Edoc-doctor-appointment-system 安全漏洞

Edoc-doctor-appointment-system is a simple web project for e-channels by HashenUdara Personal Developer. A security vulnerability exists in Edoc-doctor-appointment-system version 1.0.1, which stems from an unfiltered title parameter in admin/add-session.php, which could lead to a cross-site...

8.8CVSS6.1AI score0.00564EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/12/11 12:00 a.m.•10 views

CVE-2025-66918

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting XSS in admin/add-session.php via the "title" parameter...

5.8AI score0.00564EPSS
SaveExploits1References2
Rows per page
Query Builder