CVE-2025-29448

CVE-2025-29448 Description Défaut de logique de réservation dans Easy!Appointments v1.5.1 permettant à des attaquants non authentifiés de créer des rendez-vous avec des durées excessivement longues, provoquant un déni de service en bloquant toutes les disponibilités futures. Étapes pour reproduir...

CVE-2023-23397-POC

CVE-2023-23397-POC Эксплойт POC для CVE-2023-23397 Appointment.cs : измененный файл из https://github.com/Sicos1977/MsgKit/blob/master/MsgKit/Appointment.cs Exploit.cs : код, который я использовал для воссоздания создания вредоносной встречи. Я изменил код изображения в статье MDSEC здесь:...

Doctor Appointment System 1.0 - SQL Injection

SQL injection in the expertise parameter in searchresult.php in Doctor Appointment System v1.0. id: CVE-2021-27124 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: medium description: | SQL injection in the expertise parameter in searchresult.php in Doctor...

Bookly <=28.1 - IDOR Unauthenticated Sensitive Data Access

Bookly WordPress plugin = 28.1 contains an insecure direct object reference caused by missing validation on 'conversationid' parameter, letting unauthenticated attackers read and inject messages into any AI booking conversation, exploit requires no authentication. id: CVE-2026-89063 info: name:...

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter. id: CVE-2021-27315 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind...

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via lastname parameter. id: CVE-2021-27316 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind SQ...

TrueBooker <= 1.0.2 - SQL Injection

The TrueBooker Appointment Booking and Scheduler Plugin. plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 1.0.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via email parameter. id: CVE-2021-27319 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind SQL...

Doctor Appointment System 1.0 - SQL Injection

SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page. id: CVE-2021-27314 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: critical description: |...

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter. id: CVE-2021-27320 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind S...

CVE-2023-23397

CVE-2023-23397 CVE-2023-23397 C PoC 1- téléchargez le msgkit 2- modifiez la classe appointment et ajoutez ce qui suit : 3- créez une nouvelle classe dans le projet pour définir les propriétés du fichier msg : using MsgKit.Enums; using System; using System.Collections.Generic; using System.Linq;...

CVE-2026-94432

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.7.1 via the OsPaypalConnectController::createorderfortransaction action registered as a public unauthenticate...

CVE-2026-94432 Appointment Booking Plugin <= 5.7.1 - Insecure Direct Object Reference to Unauthenticated Unauthorized Transaction Intent Creation/Modification and Invoice Enumeration via 'invoice_id' Parameter

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.7.1 via the OsPaypalConnectController::createorderfortransaction action registered as a public unauthenticate...

instant-appointment-arbitrary-file-upload

instant-appointment-arbitrary-file-upload instant-appointment — произвольная загрузка файлов Описание Плагин Instant Appointment для WordPress уязвим к произвольной загрузке файлов в версиях до 1.2 включительно. Это позволяет неаутентифицированным злоумышленникам загрузить шелл и выполнять команд...

CVE-2026-9830

-orange?style=for-the-badge CVE-2026-9830 — Обход аутентификации в BookingPress Pro Комплексное исследование угроз в области кибербезопасности Обзор • Отчёты • Ключевые выводы • Технические детали • Оценка рисков • Меры по устранению • Ссылки 📋 Обзор CVE-2026-9830 — это критическая уязвимость...

CVE-2025-7753

🚨 CVE-2025-7753 — Exploit PoC d'injection SQL Auteur : Byte Reaper Telegram: @ByteReaper0 CVE: CVE‑2025‑7753 Vulnérabilité : Injection SQL non authentifiée, basée sur le temps 🔍 Aperçu Une vulnérabilité critique d'injection SQL existe dans Online Appointment Booking System 1.0 Code‑Projects dans ...

exploits

exploits Опубликованные PoC можно найти на exploitdb.com Patient Appointment Scheduler System v1.0: Inbit Messenger v4.6.0:...

CVE-2026-16540-SimplyScheduleAppointments

CVE-2026-16540 — Simply Schedule Appointments 1.6.12.6 Неаутентифицированное раскрытие данных о записях и массовое удаление через конечную точку purge Поле| Подробности ---|--- CVE| CVE-2026-16540 Плагин| Simply Schedule Appointments Затронутые версии| 1.6.12.6 Исправлено в| 1.6.12.6 Активных...

WordPress Appointment Hour Booking – Booking Calendar plugin <= 1.5.97 - Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability

Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability discovered by Zackary Loevseth in WordPress Plugin Appointment Hour Booking versions = 1.5.97...

CVE-2025-45805

CVE-2025-45805 PoC уязвимости CVE-2025-45805 Затронутый продукт: Doctor Appointment Management System Вендор: phpgurukul Версия: 1.0 Тип уязвимости: Хранимый межсайтовый скриптинг XSS Описание: Аутентифицированный пользователь-врач может внедрить произвольный JavaScript-код в поле профиля врача...