Lucene search
+L

495 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:45 p.m.18 views

CVE-2026-37602

SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/user/manageuser.php...

2.7CVSS5.7AI score0.0019EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:33 p.m.17 views

CVE-2026-9603

A security vulnerability has been detected in SourceCodester eDoc Doctor Appointment System 1.0. This affects an unknown part of the file /admin/delete-session.php. The manipulation of the argument ID leads to missing authorization. Remote exploitation of the attack is possible. The exploit has...

6.9CVSS6.2AI score0.00325EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/01 10:3 p.m.20 views

CVE-2026-36324

SourceCodester Doctor Appointment System 1.0 is vulnerable to Cross Site Scripting XSS due to improper handling of user supplied input in the user registration functionality in register.php...

6.1CVSS5.8AI score0.00155EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/29 4:16 p.m.22 views

CVE-2026-36324

SourceCodester Doctor Appointment System 1.0 is vulnerable to Cross Site Scripting XSS due to improper handling of user supplied input in the user registration functionality in register.php...

6.1CVSS0.00155EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/29 12:0 a.m.15 views

SourceCodester Doctor Appointment System 安全漏洞

SourceCodester Doctor Appointment System is an open-source application developed by SourceCodester. It provides a scheduling feature. Version 1.0 of the SourceCodester Doctor Appointment System contains a security vulnerability. This vulnerability stems from the improper handling of user inputs...

6.1CVSS5.6AI score0.00155EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/29 12:0 a.m.13 views

CVE-2026-36324

SourceCodester Doctor Appointment System 1.0 is vulnerable to Cross Site Scripting XSS due to improper handling of user supplied input in the user registration functionality in register.php...

5.8AI score0.00155EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/05/29 12:0 a.m.55 views

CVE-2026-36324

SourceCodester Doctor Appointment System 1.0 is vulnerable to Cross Site Scripting XSS due to improper handling of user supplied input in the user registration functionality in register.php...

0.00155EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/29 12:0 a.m.12 views

CVE-2026-36324

SourceCodester Doctor Appointment System 1.0 is vulnerable to Cross Site Scripting XSS due to improper handling of user supplied input in the user registration functionality in register.php...

5.8AI score0.00155EPSS
SaveExploits0References2
CVE
CVE
added 2026/05/29 12:0 a.m.28 views

CVE-2026-36324

The CVE refers to SourceCodester Doctor Appointment System 1.0, where the XSS vulnerability originates from improper handling of user input in the user registration form (register.php). The available connected sources confirm the vulnerable component and the vulnerability type but do not provide ...

6.1CVSS5.8AI score0.00155EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/29 12:0 a.m.22 views

PT-2026-44899

SourceCodester Doctor Appointment System 1.0 is vulnerable to Cross Site Scripting XSS due to improper handling of user supplied input in the user registration functionality in register.php...

5.8AI score0.00155EPSS
SaveExploits0References3
NVD
NVD
added 2026/05/26 10:16 p.m.29 views

CVE-2026-9603

A security vulnerability has been detected in SourceCodester eDoc Doctor Appointment System 1.0. This affects an unknown part of the file /admin/delete-session.php. The manipulation of the argument ID leads to missing authorization. Remote exploitation of the attack is possible. The exploit has...

6.9CVSS0.00325EPSS
SaveExploits0References6
CVE
CVE
added 2026/05/26 10:0 p.m.26 views

CVE-2026-9603

CVE-2026-9603 affects SourceCodester eDoc Doctor Appointment System 1.0. The vulnerability is due to manipulation of the ID parameter in /admin/delete-session.php, leading to missing authorization and enabling remote exploitation. Public PoC/exploit details are referenced. Vulnerability details r...

6.9CVSS6.3AI score0.00325EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/05/26 12:0 a.m.23 views

SourceCodester eDoc Doctor Appointment System 安全漏洞

SourceCodester eDoc Doctor Appointment System is an open-source appointment system for doctors developed by SourceCodester. Version 1.0 of the SourceCodester eDoc Doctor Appointment System contains a security vulnerability. This vulnerability stems from incorrect parameter handling in the...

6.9CVSS6.6AI score0.00325EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/04/14 3:30 p.m.9 views

EUVD-2026-22271

SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/appointments/manageappointment.php...

2.7CVSS5.9AI score0.0019EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.12 views

PT-2026-32641

CVE-2026-37601 SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/appointments/manage appointment.php. https://t.co/UmuQdNNj6l...

2.7CVSS5.8AI score0.0019EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/04/14 12:0 a.m.50 views

CVE-2026-37598

SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to arbitrary code execution RCE via /scheduler/classes/SystemSettings.php?f=updatesettings...

0.00239EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/14 12:0 a.m.30 views

CVE-2026-37601

SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/appointments/manageappointment.php...

0.0019EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/14 12:0 a.m.14 views

CVE-2026-37601

SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/appointments/manage_appointment.php. The CVE notes a database-query flaw exploitable via that PHP endpoint, but no specific impact, affected version ranges beyond v1.0, or concrete...

2.7CVSS5.9AI score0.0019EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.12 views

PT-2026-32640

CVE-2026-37600 SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/appointments/view details.php. https://t.co/uQ5V37C8xd...

2.7CVSS5.8AI score0.0019EPSS
SaveExploits0References3
CVE
CVE
added 2026/04/14 12:0 a.m.16 views

CVE-2026-37602

SourceCodester Patient Appointment Scheduler System v1.0 is affected by a SQL Injection in /scheduler/admin/user/manage_user.php. The CVE reports a low-severity issue (CVSS v3.1: 2.7, LOW) with NETWORK attack vector, HIGH privileges required, and no user interaction. Impact is limited to confiden...

2.7CVSS5.9AI score0.0019EPSS
SaveExploits0References1
Rows per page
Query Builder