Lucene search
+L

3007 matches found

RedhatCVE
RedhatCVE
•added 2025/12/18 10:37 p.m.•16 views

CVE-2025-14833

A security flaw has been discovered in code-projects Online Appointment Booking System 1.0. The impacted element is an unknown function of the file /admin/deletemanagerclinic.php. Performing manipulation of the argument clinic results in sql injection. The attack can be initiated remotely. The...

9.8CVSS7AI score0.00363EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/18 12:34 a.m.•12 views

EUVD-2025-204012

A security flaw has been discovered in code-projects Online Appointment Booking System 1.0. The impacted element is an unknown function of the file /admin/deletemanagerclinic.php. Performing manipulation of the argument clinic results in sql injection. The attack can be initiated remotely. The...

7.5CVSS6.5AI score0.00363EPSS
SaveExploits0References6
NVD
NVD
•added 2025/12/17 11:15 p.m.•43 views

CVE-2025-14833

A security flaw has been discovered in code-projects Online Appointment Booking System 1.0. The impacted element is an unknown function of the file /admin/deletemanagerclinic.php. Performing manipulation of the argument clinic results in sql injection. The attack can be initiated remotely. The...

9.8CVSS0.00363EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2025/12/17 11:15 p.m.•19 views

CVE-2025-14833

A security flaw has been discovered in code-projects Online Appointment Booking System 1.0. The impacted element is an unknown function of the file /admin/deletemanagerclinic.php. Performing manipulation of the argument clinic results in sql injection. The attack can be initiated remotely. The...

9.8CVSS5.8AI score0.00363EPSS
SaveExploits0References5
CVE
CVE
•added 2025/12/17 10:32 p.m.•38 views

CVE-2025-14833

The CVE-2025-14833 entry concerns code-projects Online Appointment Booking System 1.0. A SQL injection vulnerability exists in the /admin/deletemanagerclinic.php file, originating from unsafely handling the clinic parameter. This flaw enables remote exploitation and has publicly available exploit...

9.8CVSS7AI score0.00363EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/17 10:32 p.m.•9 views

CVE-2025-14833 code-projects Online Appointment Booking System deletemanagerclinic.php sql injection

A security flaw has been discovered in code-projects Online Appointment Booking System 1.0. The impacted element is an unknown function of the file /admin/deletemanagerclinic.php. Performing manipulation of the argument clinic results in sql injection. The attack can be initiated remotely. The...

7.5CVSS7AI score0.00363EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/12/17 10:32 p.m.•42 views

CVE-2025-14833 code-projects Online Appointment Booking System deletemanagerclinic.php sql injection

A security flaw has been discovered in code-projects Online Appointment Booking System 1.0. The impacted element is an unknown function of the file /admin/deletemanagerclinic.php. Performing manipulation of the argument clinic results in sql injection. The attack can be initiated remotely. The...

7.5CVSS0.00363EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/17 12:00 a.m.•9 views

CVE-2025-14833: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in code-projects Online Appointment Booking System 1.0. The impacted element is an unknown function of the file /admin/deletemanagerclinic.php. Performing manipulation of the argument clinic results in sql injection. The attack can be initiated remotely. The...

9.8CVSS7AI score0.00363EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/17 12:00 a.m.•15 views

Code-Projects Online Appointment Booking System SQL Injection Vulnerability

Online Appointment Booking System is an online appointment booking system. Online Appointment Booking System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter clinic in the file...

9.8CVSS7.9AI score0.00363EPSS
SaveExploits0References6
GithubExploit
GithubExploit
•added 2025/12/15 5:27 p.m.•204 views

Exploit for Cross-site Scripting in Phpgurukul Doctor_Appointment_Management_System

CVE-2025-45805 Poc Of CVE-2025-45805 Affected Product: Doctor...

7.6CVSS6AI score0.00388EPSS
SaveExploits2
Patchstack
Patchstack
•added 2025/12/15 1:30 p.m.•21 views

WordPress Booking calendar, Appointment Booking System plugin <= 3.2.30 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Booking calendar, Appointment Booking System versions = 3.2.30...

5.3CVSS7AI score0.00254EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/12/12 1:06 a.m.•16 views

CVE-2025-66918

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting XSS in admin/add-session.php via the "title" parameter...

8.8CVSS6.3AI score0.00564EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/12/11 6:16 p.m.•23 views

CVE-2025-66918

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting XSS in admin/add-session.php via the "title" parameter...

8.8CVSS5.8AI score0.00564EPSS
SaveExploits1References2
NVD
NVD
•added 2025/12/11 6:16 p.m.•33 views

CVE-2025-66918

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting XSS in admin/add-session.php via the "title" parameter...

8.8CVSS0.00564EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/12/11 12:00 a.m.•51 views

CVE-2025-66918

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting XSS in admin/add-session.php via the "title" parameter...

0.00564EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/11 12:00 a.m.•7 views

CVE-2025-66918: Improper Input Validation

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting XSS in admin/add-session.php via the "title" parameter...

8.8CVSS5.8AI score0.00564EPSS
SaveExploits1References4
CVE
CVE
•added 2025/12/11 12:00 a.m.•37 views

CVE-2025-66918

edoc-doctor-appointment-system v1.0.1 is vulnerable to a Cross Site Scripting (XSS) flaw in the admin/add-session.php component. The root cause is an unfiltered "title" parameter, which allows an attacker to inject malicious scripts into the web page. Practical consequences include the execution ...

8.8CVSS5.8AI score0.00564EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/11 12:00 a.m.•10 views

CVE-2025-66918

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting XSS in admin/add-session.php via the "title" parameter...

5.8AI score0.00564EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/12/11 12:00 a.m.•21 views

EUVD-2025-202753

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting XSS in admin/add-session.php via the "title" parameter...

8.8CVSS5.7AI score0.00564EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/12/11 12:00 a.m.•19 views

Edoc-doctor-appointment-system security vulnerabilities

Edoc-doctor-appointment-system is a simple web project for e-channels by HashenUdara Personal Developer. A security vulnerability exists in Edoc-doctor-appointment-system version 1.0.1, which stems from an unfiltered title parameter in admin/add-session.php, which could lead to a cross-site...

8.8CVSS6.1AI score0.00564EPSS
SaveExploits1References2
Rows per page
Query Builder