Lucene search
+L

480 matches found

CNNVD
CNNVD
added 2025/03/23 12:0 a.m.6 views

PHPGurukul Doctor Appointment Management System 注入漏洞

Doctor Appointment Management System is a doctor appointment management system. Doctor Appointment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter searchdata of /check-appointment.php. A...

9.8CVSS8.2AI score0.00463EPSS
Exploits1References5
CNVD
CNVD
added 2025/03/19 12:0 a.m.3 views

Doctor Appointment Management System /doctor/search.php File SQL Injection Vulnerability

Doctor Appointment Management System is a doctor appointment management system. Doctor Appointment Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements in the searchdata parameter of file /doctor/search.php. An...

9.8CVSS8AI score0.00487EPSS
Exploits1References1
OSV
OSV
added 2025/03/17 4:15 p.m.3 views

CVE-2025-2383

A vulnerability, which was classified as critical, has been found in PHPGurukul Doctor Appointment Management System 1.0. Affected by this issue is some unknown functionality of the file /doctor/search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be...

9.8CVSS5.8AI score0.00487EPSS
Exploits1References5
CVE
CVE
added 2025/03/17 3:31 p.m.63 views

CVE-2025-2383

CVE-2025-2383 affects PHPGurukul Doctor Appointment Management System 1.0. The vulnerability is a SQL injection in the /doctor/search.php file via the searchdata parameter in an affected request, with remote exploitation and exploitation disclosed publicly. The exact vulnerable component is descr...

9.8CVSS7.4AI score0.00487EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2025/03/17 12:0 a.m.5 views

PHPGurukul Doctor Appointment Management System 安全漏洞

Doctor Appointment Management System is a doctor appointment management system. Doctor Appointment Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements in the searchdata parameter of file /doctor/search.php. An...

9.8CVSS8.2AI score0.00487EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/02/05 5:1 a.m.10 views

CVE-2024-10791

A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issue affects some unknown processing of the file /doctorAction.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit...

9.8CVSS7.3AI score0.00587EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 5:0 a.m.18 views

CVE-2024-10449

A vulnerability, which was classified as critical, was found in Codezips Hospital Appointment System 1.0. This affects an unknown part of the file /loginAction.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

9.8CVSS7.3AI score0.01369EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 4:58 a.m.9 views

CVE-2024-10991

A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issue affects some unknown processing of the file /editBranchResult.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploi...

9.8CVSS7.4AI score0.00663EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 4:53 a.m.8 views

CVE-2024-10995

A vulnerability was found in Codezips Hospital Appointment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /removeDoctorResult.php. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploi...

9.8CVSS7.3AI score0.00663EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 4:24 a.m.9 views

CVE-2024-9818

A vulnerability classified as critical has been found in SourceCodester Online Veterinary Appointment System 1.0. Affected is an unknown function of the file /admin/categories/managecategory.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...

9.8CVSS9.8AI score0.00646EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 1:36 a.m.11 views

CVE-2024-11057

A vulnerability has been found in Codezips Hospital Appointment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /removeBranchResult.php. The manipulation of the argument ID/Name leads to sql injection. The attack can be launched...

9.8CVSS9.8AI score0.00628EPSS
Exploits1References1
NVD
NVD
added 2024/11/10 6:15 p.m.14 views

CVE-2024-11057

A vulnerability has been found in Codezips Hospital Appointment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /removeBranchResult.php. The manipulation of the argument ID/Name leads to sql injection. The attack can be launched...

9.8CVSS0.00628EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/11/10 6:0 p.m.19 views

CVE-2024-11057 Codezips Hospital Appointment System removeBranchResult.php sql injection

A vulnerability has been found in Codezips Hospital Appointment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /removeBranchResult.php. The manipulation of the argument ID/Name leads to sql injection. The attack can be launched...

7.5CVSS0.00628EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/11/10 6:0 p.m.14 views

CVE-2024-11057 Codezips Hospital Appointment System removeBranchResult.php sql injection

A vulnerability has been found in Codezips Hospital Appointment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /removeBranchResult.php. The manipulation of the argument ID/Name leads to sql injection. The attack can be launched...

7.5CVSS7.5AI score0.00628EPSS
Exploits1References4
CVE
CVE
added 2024/11/10 6:0 p.m.47 views

CVE-2024-11057

CVE-2024-11057 is a confirmed vulnerability in Codezips Hospital Appointment System 1.0. The weakness resides in the file /removeBranchResult.php, where manipulation of the ID/Name parameter enables SQL injection. It is described as remotely exploitable, with public disclosures of exploits. Multi...

9.8CVSS7.7AI score0.00628EPSS
Exploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/10 12:0 a.m.4 views

PT-2024-16729 · Unknown · Codezips Hospital Appointment System

Name of the Vulnerable Software and Affected Versions: Codezips Hospital Appointment System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /removeBranchResult.php. The manipulation of the ID/Name argument leads to sql...

9.8CVSS7.7AI score0.00628EPSS
Exploits1References11
NVD
NVD
added 2024/11/08 7:15 a.m.12 views

CVE-2024-10995

A vulnerability was found in Codezips Hospital Appointment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /removeDoctorResult.php. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploi...

9.8CVSS0.00663EPSS
Exploits1References4
OSV
OSV
added 2024/11/08 7:15 a.m.6 views

CVE-2024-10995

A vulnerability was found in Codezips Hospital Appointment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /removeDoctorResult.php. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploi...

9.8CVSS5.8AI score0.00663EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/11/08 6:31 a.m.14 views

CVE-2024-10995 Codezips Hospital Appointment System removeDoctorResult.php sql injection

A vulnerability was found in Codezips Hospital Appointment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /removeDoctorResult.php. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploi...

7.5CVSS7.5AI score0.00663EPSS
Exploits1References4
CVE
CVE
added 2024/11/08 6:31 a.m.52 views

CVE-2024-10995

The CVE-2024-10995 entry affects Codezips Hospital Appointment System 1.0. The vulnerability is in the file /removeDoctorResult.php, where the Name parameter can cause SQL injection. It may be exploited remotely with low attack complexity and no privileges, risking confidentiality, integrity, and...

9.8CVSS7.6AI score0.00663EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder