Lucene search
+L

3019 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/03 12:00 a.m.•9 views

CVE-2025-3181: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in projectworlds Online Doctor Appointment Booking System 1.0. Affected by this issue is some unknown functionality of the file /patient/appointment.php?scheduleDate=1&appid=1. The manipulation of the argument scheduleDate leads to...

9.8CVSS7AI score0.00603EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/03 12:00 a.m.•9 views

CVE-2025-3178: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /doctor/deleteappointment.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated...

9.8CVSS7AI score0.00603EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/04/03 12:00 a.m.•17 views

PT-2025-14633 · Unknown · Projectworlds Online Doctor Appointment Booking System

Name of the Vulnerable Software and Affected Versions: projectworlds Online Doctor Appointment Booking System version 1.0 Description: A critical issue has been found in the projectworlds Online Doctor Appointment Booking System, affecting some unknown functionality of the file...

9.8CVSS7.6AI score0.00603EPSS
SaveExploits1References11
RedhatCVE
RedhatCVE
•added 2025/04/02 1:34 p.m.•15 views

CVE-2025-31601

Cross-Site Request Forgery CSRF vulnerability in appointy Appointy Appointment Scheduler appointy-appointment-scheduler allows Cross Site Request Forgery.This issue affects Appointy Appointment Scheduler: from n/a through = 4.2.1...

6.5CVSS7.2AI score0.00178EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/31 1:15 p.m.•23 views

CVE-2025-31601

Cross-Site Request Forgery CSRF vulnerability in appointy Appointy Appointment Scheduler appointy-appointment-scheduler allows Cross Site Request Forgery.This issue affects Appointy Appointment Scheduler: from n/a through = 4.2.1...

6.5CVSS0.00178EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/31 12:55 p.m.•80 views

CVE-2025-31601

Technical details for CVE-2025-31601 (Appointy CSRF) are not provided in the attached documents; monitor for updates from vendors or security advisories.

6.5CVSS7.2AI score0.00178EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/31 12:55 p.m.•10 views

CVE-2025-31601 WordPress Appointy Appointment Scheduler plugin <= 4.2.1 - CSRF to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in appointy Appointy Appointment Scheduler allows Cross Site Request Forgery. This issue affects Appointy Appointment Scheduler: from n/a through 4.2.1...

6.5CVSS6.9AI score0.00178EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/31 12:55 p.m.•34 views

CVE-2025-31601 WordPress Appointy Appointment Scheduler plugin <= 4.2.1 - CSRF to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in appointy Appointy Appointment Scheduler appointy-appointment-scheduler allows Cross Site Request Forgery.This issue affects Appointy Appointment Scheduler: from n/a through = 4.2.1...

6.5CVSS0.00178EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•8 views

CVE-2025-31601: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in appointy Appointy Appointment Scheduler appointy-appointment-scheduler allows Cross Site Request Forgery.This issue affects Appointy Appointment Scheduler: from n/a through = 4.2.1...

6.5CVSS5.8AI score0.00178EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•17 views

WordPress plugin Appointy Appointment Scheduler has a cross-site request forgeing vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

6.5CVSS8.4AI score0.00178EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/31 12:00 a.m.•7 views

PT-2025-13747

Name of the Vulnerable Software and Affected Versions Appointy Appointment Scheduler versions n/a through 4.2.1 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. This means an attacker can trick a user into performing...

6.5CVSS0.00178EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/03/29 4:22 p.m.•42 views

CVE-2025-22634

Cross-Site Request Forgery CSRF vulnerability in MD Abu Jubayer Hossain Easy Booked – Appointment Booking and Scheduling Management System for WordPress easy-booked allows Cross Site Request Forgery.This issue affects Easy Booked – Appointment Booking and Scheduling Management System for WordPres...

5.4CVSS7.2AI score0.00143EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/27 4:15 p.m.•35 views

CVE-2025-22634

Cross-Site Request Forgery CSRF vulnerability in MD Abu Jubayer Hossain Easy Booked – Appointment Booking and Scheduling Management System for WordPress easy-booked allows Cross Site Request Forgery.This issue affects Easy Booked – Appointment Booking and Scheduling Management System for WordPres...

5.4CVSS0.00143EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/27 3:27 p.m.•90 views

CVE-2025-22634

CVE-2025-22634 involves the WordPress plugin Easy Booked (MD Abu Jubayer Hossain Easy Booked)

5.4CVSS7.2AI score0.00143EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/03/27 12:00 a.m.•17 views

Doctor Appointment Management System appointment-bwdates-reports-details.php file SQL injection vulnerability

Doctor Appointment Management System is a doctor appointment management system. Doctor Appointment Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter fromdate/todate of...

9.8CVSS8.3AI score0.00537EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/27 12:00 a.m.•6 views

CVE-2025-22634: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in MD Abu Jubayer Hossain Easy Booked – Appointment Booking and Scheduling Management System for WordPress easy-booked allows Cross Site Request Forgery.This issue affects Easy Booked – Appointment Booking and Scheduling Management System for WordPres...

5.4CVSS5.8AI score0.00143EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/03/27 12:00 a.m.•17 views

Doctor Appointment Management System check-appointment.php File SQL Injection Vulnerability

Doctor Appointment Management System is a doctor appointment management system. Doctor Appointment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter searchdata of /check-appointment.php. A...

9.8CVSS7.9AI score0.00502EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/23 12:15 p.m.•60 views

CVE-2025-2649

A vulnerability classified as critical was found in PHPGurukul Doctor Appointment Management System 1.0. This vulnerability affects unknown code of the file /check-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploi...

9.8CVSS0.00502EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/03/23 12:15 p.m.•19 views

CVE-2025-2649

A vulnerability classified as critical was found in PHPGurukul Doctor Appointment Management System 1.0. This vulnerability affects unknown code of the file /check-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploi...

9.8CVSS5.8AI score0.00502EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/03/23 12:00 p.m.•49 views

CVE-2025-2649 PHPGurukul Doctor Appointment Management System check-appointment.php sql injection

A vulnerability classified as critical was found in PHPGurukul Doctor Appointment Management System 1.0. This vulnerability affects unknown code of the file /check-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploi...

7.5CVSS0.00502EPSS
SaveExploits1References5
Rows per page
Query Builder