Lucene search
+L

3014 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/07/02 8:50 a.m.•12 views

Malicious code in patient-appointment-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fb18be6d022e135df2a66c90067908650077628db97d427a1058b8d3877bae6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/07/02 8:50 a.m.•4 views

Malware in patient-appointment-management

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2025/07/02 8:50 a.m.•11 views

MAL-2025-5571 Malicious code in patient-appointment-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fb18be6d022e135df2a66c90067908650077628db97d427a1058b8d3877bae6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Patchstack
Patchstack
•added 2025/07/01 10:25 p.m.•9 views

WordPress Booking calendar, Appointment Booking System plugin <= 3.2.17 - Unauthenticated Time-Based SQL Injection via 'wpdevart_id' vulnerability

Unauthenticated Time-Based SQL Injection via 'wpdevartid' vulnerability discovered by shaman0x01 in WordPress Plugin Booking calendar, Appointment Booking System versions = 3.2.17...

8.1AI score
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/06/30 12:00 a.m.•16 views

SourceCodester’s Best Salon Management System has a vulnerability regarding injection attacks

SourceCodester Best Salon Management System is a SourceCodester open source salon management system. SourceCodester Best Salon Management System version 1.0 suffers from an injection vulnerability, which originates from a SQL injection due to the incorrect operation of the parameter searchdata in...

8.8CVSS6.9AI score0.00435EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/27 12:00 a.m.•4 views

CVE-2025-25173: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FasterThemes FastBook fastbook-responsive-appointment-booking-and-scheduling-system allows Stored XSS.This issue affects FastBook: from n/a through = 1.1...

7.1CVSS5.8AI score0.00252EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/06/25 12:15 a.m.•19 views

CVE-2025-6583

A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /view-appointment.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The...

8.8CVSS5.7AI score0.00451EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/06/24 12:00 a.m.•22 views

SourceCodester’s Best Salon Management System has security vulnerabilities

SourceCodester Best Salon Management System is an open source salon management system from SourceCodester. A security vulnerability exists in SourceCodester Best Salon Management System version 1.0, which stems from improper handling of the viewid parameter in the view-appointment.php file, which...

8.8CVSS7AI score0.00451EPSS
SaveExploits1References2
GithubExploit
GithubExploit
•added 2025/06/14 7:08 a.m.•430 views

Exploit for CVE-2025-46181

CVE-2025-46181 - Reflected XSS in an Online Appointment Bookin...

6.7AI score
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/14 12:00 a.m.•6 views

CVE-2025-4667: Improper Neutralization of Input During Web Page Generation

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ssaadminupcomingappointments, ssaadminupcomingappointments, and ssapastappointments shortcodes in all versions up to, and including,...

6.4CVSS6AI score0.00292EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/06/06 3:15 a.m.•17 views

CVE-2025-5712

A vulnerability has been found in SourceCodester Open Source Clinic Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /appointment.php. The manipulation of the argument patient leads to sql injection. The attack can be launche...

6.9CVSS5.8AI score0.00445EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/06/06 12:00 a.m.•17 views

SourceCodester Open Source Clinic Management System Injection Vulnerability

SourceCodester Open Source Clinic Management System is an open source clinic management system from SourceCodester Open Source. An injection vulnerability exists in SourceCodester Open Source Clinic Management System version 1.0, which results from SQL injection due to incorrect manipulation of t...

7.5CVSS7.8AI score0.00445EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/05/30 8:15 p.m.•14 views

CVE-2025-5360

A vulnerability classified as critical was found in Campcodes Online Hospital Management System 1.0. This vulnerability affects unknown code of the file /book-appointment.php. The manipulation of the argument doctor leads to sql injection. The attack can be initiated remotely. The exploit has bee...

9.8CVSS5.8AI score0.00507EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/05/30 7:15 p.m.•20 views

CVE-2025-5359

A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. This affects an unknown part of the file /appointment-history.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

9.8CVSS5.8AI score0.00507EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/05/30 6:31 p.m.•41 views

CVE-2025-5359 Campcodes Online Hospital Management System appointment-history.php sql injection

A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. This affects an unknown part of the file /appointment-history.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

7.5CVSS0.00507EPSS
SaveExploits1References5
CVE
CVE
•added 2025/05/30 6:31 p.m.•86 views

CVE-2025-5359

CVE-2025-5359 affects Campcodes Online Hospital Management System version 1.0. The vulnerability is in the file /appointment-history.php, where manipulation of the ID parameter leads to a SQL injection. The issue is exploitable remotely and has been publicly disclosed. Multiple connected sources ...

9.8CVSS7.5AI score0.00507EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/05/30 6:31 p.m.•20 views

CVE-2025-5359 Campcodes Online Hospital Management System appointment-history.php sql injection

A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. This affects an unknown part of the file /appointment-history.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

7.5CVSS7.5AI score0.00507EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/05/30 12:00 a.m.•19 views

CampCodes Online Hospital Management System injection vulnerability

CampCodes Online Hospital Management System is an online hospital management system from CampCodes, Inc. An injection vulnerability exists in version 1.0 of the CampCodes Online Hospital Management System, which originates from a SQL injection due to an incorrect manipulation of the doctor...

9.8CVSS7.7AI score0.00507EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/05/30 12:00 a.m.•19 views

CampCodes Online Hospital Management System injection vulnerability

CampCodes Online Hospital Management System is an online hospital management system from CampCodes, Inc. An injection vulnerability exists in version 1.0 of the CampCodes Online Hospital Management System, which originates from a SQL injection due to an incorrect manipulation of the parameter ID ...

9.8CVSS7.7AI score0.00507EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/30 12:00 a.m.•7 views

CVE-2025-5359: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. This affects an unknown part of the file /appointment-history.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

9.8CVSS7AI score0.00507EPSS
SaveExploits1References1
Rows per page
Query Builder