Lucene search
+L

2561 matches found

Nuclei
Nuclei
•added 2026/09/26 2:05 a.m.•64 views

Doctor Appointment System 1.0 - SQL Injection

SQL injection in the expertise parameter in searchresult.php in Doctor Appointment System v1.0. id: CVE-2021-27124 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: medium description: | SQL injection in the expertise parameter in searchresult.php in Doctor...

6.5CVSS6.7AI score0.05831EPSS
SaveExploits1References3
Nuclei
Nuclei
•added 2026/09/26 2:05 a.m.•68 views

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via lastname parameter. id: CVE-2021-27316 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind SQ...

7.5CVSS7.6AI score0.07826EPSS
SaveExploits3References3
Nuclei
Nuclei
•added 2026/09/26 2:05 a.m.•60 views

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter. id: CVE-2021-27315 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind...

7.5CVSS7.5AI score0.07826EPSS
SaveExploits3References3
Nuclei
Nuclei
•added 2026/09/26 2:05 a.m.•7 views

Bookly <=28.1 - IDOR Unauthenticated Sensitive Data Access

Bookly WordPress plugin = 28.1 contains an insecure direct object reference caused by missing validation on 'conversationid' parameter, letting unauthenticated attackers read and inject messages into any AI booking conversation, exploit requires no authentication. id: CVE-2026-89063 info: name:...

7.5CVSS5.8AI score0.01628EPSS
SaveExploits0
Nuclei
Nuclei
•added 2026/09/26 2:05 a.m.•54 views

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via email parameter. id: CVE-2021-27319 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind SQL...

7.5CVSS7.3AI score0.07826EPSS
SaveExploits3References3
Nuclei
Nuclei
•added 2026/09/26 2:05 a.m.•97 views

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter. id: CVE-2021-27320 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind S...

7.5CVSS7.3AI score0.09299EPSS
SaveExploits3References3
Nuclei
Nuclei
•added 2026/09/26 2:05 a.m.•106 views

Doctor Appointment System 1.0 - SQL Injection

SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page. id: CVE-2021-27314 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: critical description: |...

9.8CVSS8.2AI score0.12394EPSS
SaveExploits3References3
Nuclei
Nuclei
•added 2026/09/26 2:05 a.m.•69 views

TrueBooker <= 1.0.2 - SQL Injection

The TrueBooker Appointment Booking and Scheduler Plugin. plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 1.0.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

9.8CVSS5.7AI score0.03292EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2026/09/25 5:37 a.m.•10 views

instant-appointment-arbitrary-file-upload

instant-appointment-arbitrary-file-upload instant-appointment - Arbitrary File upload Description The Instant Appointment plugin for WordPress is vulnerable to Arbitrary File upload in versions up to, and including, 1.2. This makes it possible for unauthenticated attackers to upload a shell and...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 1:45 a.m.•7 views

CVE-2023-23397-POC

CVE-2023-23397-POC Exploit POC for CVE-2023-23397 Appointment.cs : the modified file from https://github.com/Sicos1977/MsgKit/blob/master/MsgKit/Appointment.cs Exploit.cs : the code i used to replicate creating the malicious appointment . i modified the code picture in MDSEC article here :...

9.8CVSS8.3AI score0.97159EPSS
SaveExploits19References2
Kitploit
Kitploit
•added 2026/09/25 12:36 a.m.•8 views

CVE-2026-9830

-orange?style=for-the-badge CVE-2026-9830 — BookingPress Pro Authentication Bypass Comprehensive Cybersecurity Threat Intelligence Investigation Overview • Reports • Key Findings • Technical Details • Risk Assessment • Mitigation • References 📋 Overview CVE-2026-9830 is a critical authentication...

8.2CVSS5.8AI score0.00426EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/24 11:58 p.m.•11 views

CVE-2025-7753

🚨 CVE-2025-7753 — Exploit PoC de Inyección SQL Autor: Byte Reaper Telegram: @ByteReaper0 CVE: CVE‑2025‑7753 Vulnerabilidad: Sin autenticación, Inyección SQL basada en tiempo 🔍 Resumen Existe una vulnerabilidad crítica de Inyección SQL en Online Appointment Booking System 1.0 Code‑Projects en el...

9.8CVSS7.5AI score0.00426EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/24 6:05 p.m.•12 views

exploits

exploits Published PoCs can be found at exploitdb.com Patient Appointment Scheduler System v1.0: Inbit Messenger v4.6.0:...

6AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/24 3:06 p.m.•6 views

CVE-2026-16540-SimplyScheduleAppointments

CVE-2026-16540 — Simply Schedule Appointments 1.6.12.6 Unauthenticated Appointment Data Disclosure and Mass Deletion via purge Endpoint...

7.5CVSS5.9AI score0.00406EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/24 10:56 a.m.•11 views

CVE-2025-45805

CVE-2025-45805 Poc Of CVE-2025-45805 Affected Product: Doctor Appointment Management System Vendor: phpgurukul Version: 1.0 Vulnerability Type: Stored Cross-Site Scripting XSS Description: An authenticated doctor user can inject arbitrary JavaScript code into the doctor profile field name/employe...

6.1AI score0.00388EPSS
SaveExploits2References1
Kitploit
Kitploit
•added 2026/09/22 6:28 p.m.•14 views

CVE-2023-23397

CVE-2023-23397 CVE-2023-23397 C PoC 1- download the msgkit 2- edit the appointment class and add the below: 3- create a new class inside the project to set the proprieties of the msg file: root@kitploit: using MsgKit.Enums; using System; using System.Collections.Generic; using System.Linq; using...

9.8CVSS8.5AI score0.97159EPSS
SaveExploits19
Kitploit
Kitploit
•added 2026/09/22 1:02 a.m.•10 views

CVE-2026-15282

CVE-2026-15282 — Instant Appointment Mass RCE Exploit Pre-Auth filegetcontents + fileputcontents → PHP Webshell Overview CVE-2026-15282 is a critical CVSS 9.8 unauthenticated arbitrary file upload vulnerability in the Instant Appointment WordPress plugin ≤ 1.2. The addservicefront AJAX action is...

9.8CVSS6AI score0.01079EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/20 3:11 p.m.•9 views

CVE-2021-25791-Multiple-Stored-XSS

CVE-2021-25791-Multiple-Stored-XSS : Múltiples XSS Almacenados en el Sistema de Citas Médicas en Línea Existen múltiples XSS almacenados autenticados en el Sistema de Citas Médicas en Línea V1.0 Enlace del software:...

5.4CVSS6.2AI score0.02535EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/19 3:20 p.m.•9 views

CVE-2025-46181-XSS

CVE-2025-46181 - Reflected XSS in an Online Appointment Booking System CVE-ID : CVE-2025-46181 Discovered by : Shemkumar P shemkumar.github.io Vulnerability Type : Reflected Cross-Site Scripting XSS Severity : Medium Status : Disclosed, CVE Assigned by MITRE ✨ Description A Reflected Cross-Site...

6.4AI score
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/19 1:59 p.m.•9 views

CVE-2025-29448

CVE-2025-29448 Descripción fallo en la lógica de reservas en Easy!Appointments v1.5.1 permite a atacantes no autenticados crear citas con duraciones excesivamente largas, causando una denegación de servicio al bloquear toda la disponibilidad futura de reservas. Pasos para Reproducir 1. Intercepta...

5.9AI score0.00556EPSS
SaveExploits1References1
Rows per page
Query Builder