Lucene search
+L

480 matches found

CNNVD
CNNVD
added 2024/10/30 12:0 a.m.4 views

PHPGurukul Doctor Appointment Management System 安全漏洞

Doctor Appointment Management System is a doctor appointment management system. Doctor Appointment Management System suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an...

5.4CVSS6AI score0.00258EPSS
Exploits0References2
NVD
NVD
added 2024/10/28 3:15 p.m.31 views

CVE-2024-10449

A vulnerability, which was classified as critical, was found in Codezips Hospital Appointment System 1.0. This affects an unknown part of the file /loginAction.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

9.8CVSS0.01369EPSS
Exploits1References4
OSV
OSV
added 2024/10/28 3:15 p.m.4 views

CVE-2024-10449

A vulnerability, which was classified as critical, was found in Codezips Hospital Appointment System 1.0. This affects an unknown part of the file /loginAction.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

9.8CVSS5.7AI score0.01369EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/10/28 2:31 p.m.14 views

CVE-2024-10449 Codezips Hospital Appointment System loginAction.php sql injection

A vulnerability, which was classified as critical, was found in Codezips Hospital Appointment System 1.0. This affects an unknown part of the file /loginAction.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

7.5CVSS7.5AI score0.01369EPSS
Exploits1References4
CVE
CVE
added 2024/10/28 2:31 p.m.54 views

CVE-2024-10449

CV_E-2024-10449 affects Codezips Hospital Appointment System 1.0. The vulnerability is in /loginAction.php where manipulating the Username parameter enables SQL injection. It can be exploited remotely and public disclosures exist; multiple sources rate it as critical/high impact with potential co...

9.8CVSS7.7AI score0.01369EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2024/10/28 2:31 p.m.24 views

CVE-2024-10449 Codezips Hospital Appointment System loginAction.php sql injection

A vulnerability, which was classified as critical, was found in Codezips Hospital Appointment System 1.0. This affects an unknown part of the file /loginAction.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

7.5CVSS0.01369EPSS
Exploits1References4
NVD
NVD
added 2024/10/10 11:15 p.m.19 views

CVE-2024-9818

A vulnerability classified as critical has been found in SourceCodester Online Veterinary Appointment System 1.0. Affected is an unknown function of the file /admin/categories/managecategory.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...

9.8CVSS0.00646EPSS
Exploits1References5
Cvelist
Cvelist
added 2024/10/10 10:31 p.m.23 views

CVE-2024-9818 SourceCodester Online Veterinary Appointment System manage_category.php sql injection

A vulnerability classified as critical has been found in SourceCodester Online Veterinary Appointment System 1.0. Affected is an unknown function of the file /admin/categories/managecategory.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...

7.5CVSS0.00646EPSS
Exploits1References5
CVE
CVE
added 2024/10/10 10:31 p.m.74 views

CVE-2024-9818

CVE-2024-9818 affects SourceCodester Online Veterinary Appointment System 1.0. The vulnerability is an SQL injection in an unknown function of /admin/categories/manage_category.php triggered by manipulating the id parameter. It can be exploited remotely and exploitation/public disclosure is noted...

9.8CVSS7.7AI score0.00646EPSS
Exploits1References5Affected Software1
Packet Storm
Packet Storm
added 2024/08/29 12:0 a.m.174 views

Online Appointment System 1.0 Insecure Settings

==================================================================================================================================== | Title : Online Appointment System v1.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1...

7.4AI score
Exploits0
OSV
OSV
added 2024/06/03 10:15 p.m.4 views

CVE-2023-24373

External Control of Assumed-Immutable Web Parameter vulnerability in WpDevArt Booking calendar, Appointment Booking System allows Manipulating Hidden Fields.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.3...

9.8CVSS5.8AI score0.00354EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/27 10:31 p.m.30 views

CVE-2024-4294 PHPGurukul Doctor Appointment Management System view-appointment-detail.php resource injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Doctor Appointment Management System 1.0. Affected by this issue is some unknown functionality of the file /doctor/view-appointment-detail.php. The manipulation of the argument editid leads to improper control of...

6.5CVSS6.8AI score0.00855EPSS
Exploits1References4
OSV
OSV
added 2024/04/27 10:15 p.m.8 views

CVE-2024-4293

A vulnerability classified as problematic was found in PHPGurukul Doctor Appointment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file appointment-bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to cross site scriptin...

5.4CVSS3.8AI score0.00635EPSS
Exploits3References4
CNNVD
CNNVD
added 2024/04/27 12:0 a.m.7 views

Doctor Appointment Management System 跨站脚本漏洞

Doctor Appointment Management System is a doctor appointment management system by the individual developer ANUJ KUMAR. A cross-site scripting vulnerability exists in Doctor Appointment Management System version 1.0, which stems from the parameter fromdate/todate in the file...

5.4CVSS6AI score0.00635EPSS
Exploits3References6
CNNVD
CNNVD
added 2024/04/27 12:0 a.m.8 views

Doctor Appointment Management System 安全漏洞

Doctor Appointment Management System is a doctor appointment management system by the individual developer ANUJ KUMAR. A security vulnerability exists in Doctor Appointment Management System version 1.0, which stems from the parameter editid in the file /doctor/view-appointment-detail.php that...

8.8CVSS6.8AI score0.00855EPSS
Exploits1References5
NVD
NVD
added 2023/09/11 8:15 p.m.22 views

CVE-2023-40945

Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php...

9.8CVSS9.8AI score0.00749EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2023/09/11 8:15 p.m.5 views

CVE-2023-40945

Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php...

9.8CVSS5.8AI score0.00749EPSS
Exploits1References2
OSV
OSV
added 2023/09/11 8:15 p.m.6 views

CVE-2023-40945

Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php...

9.8CVSS5.8AI score0.00749EPSS
Exploits1References1
Prion
Prion
added 2023/09/11 8:15 p.m.17 views

Sql injection

Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php...

7.5CVSS9.7AI score0.00749EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/09/11 12:0 a.m.7 views

PT-2023-27713 · Sourcecodester · Sourcecodester Doctors Appointment System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Doctor Appointment System version 1.0 Description: The issue concerns SQL Injection in the userid variable at the doctorsmyDetails.php endpoint. This allows for potential manipulation of database queries. Recommendations: For...

9.8CVSS9.6AI score0.00749EPSS
Exploits1References3
Rows per page
Query Builder