Lucene search
+L

2983 matches found

Packet Storm
Packet Storm
•added 2021/01/08 12:00 a.m.•180 views

Online Doctor Appointment System 1.0 Cross Site Scripting

Exploit Title: Online Doctor Appointment System 1.0 - Multiple Stored XSS Tested on: Windows 10 Exploit Author: Mohamed habib Smidi Craniums Date: 2021-01-08 Vendor Homepage: https://www.sourcecodester.com/php/14663/online-doctor-appointment-system-php-full-source-code.html Software Link:...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2021/01/08 12:00 a.m.•263 views

Online Doctor Appointment System 1.0 - 'Multiple' Stored XSS

Exploit Title: Online Doctor Appointment System 1.0 - 'Multiple' Stored XSS Tested on: Windows 10 Exploit Author: Mohamed habib Smidi Craniums Date: 2021-01-08 Vendor Homepage: https://www.sourcecodester.com/php/14663/online-doctor-appointment-system-php-full-source-code.html Software Link:...

5.4CVSS5.6AI score0.02535EPSS
SaveExploits3
osv_cve
osv_cve
•added 2021/01/07 9:15 p.m.•20 views

CVE-2020-35745

PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, doctors, patients, change admin password, get appointment history and access all session logs...

8.8CVSS5.8AI score0.01752EPSS
SaveExploits1References3
NVD
NVD
•added 2021/01/07 9:15 p.m.•33 views

CVE-2020-35745

PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, doctors, patients, change admin password, get appointment history and access all session logs...

8.8CVSS8.7AI score0.01752EPSS
SaveExploits1References3
Prion
Prion
•added 2021/01/07 9:15 p.m.•35 views

Code injection

PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, doctors, patients, change admin password, get appointment history and access all session logs...

6.5CVSS8.6AI score0.01752EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2021/01/07 8:29 p.m.•47 views

CVE-2020-35745

PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, doctors, patients, change admin password, get appointment history and access all session logs...

8.7AI score0.01752EPSS
SaveExploits1References3
CNVD
CNVD
•added 2020/12/17 12:00 a.m.•61 views

Phpjabbers Appointment Scheduler Cross-Site Scripting Vulnerability

Phpjabbers Appointment Scheduler is a Php-based appointment scheduler plugin for planning time and scheduling meetings from Phpjabbers Serbia. PHPJabbers Appointment Scheduler 2.3 is vulnerable to a cross-site scripting vulnerability that originates in the index.php administrative login page with...

6.1CVSS1.3AI score0.02711EPSS
SaveExploits4References1
Packet Storm
Packet Storm
•added 2020/12/17 12:00 a.m.•229 views

PHPJabbers Appointment Scheduler 2.3 Cross Site Scripting

Exploit Title: PHPJabbers Appointment Scheduler 2.3 - Reflected XSS Cross-Site Scripting Date: 2020-12-14 Exploit Author: Andrea Intilangelo Vendor Homepage: https://www.phpjabbers.com Software Link: https://www.phpjabbers.com/appointment-scheduler Version: 2.3 Tested on: Latest Version of Deskto...

6.4AI score0.02711EPSS
SaveExploits4
Exploit DB
Exploit DB
•added 2020/12/17 12:00 a.m.•349 views

PHPJabbers Appointment Scheduler 2.3 - Reflected XSS (Cross-Site Scripting)

Exploit Title: PHPJabbers Appointment Scheduler 2.3 - Reflected XSS Cross-Site Scripting Date: 2020-12-14 Exploit Author: Andrea Intilangelo Vendor Homepage: https://www.phpjabbers.com Software Link: https://www.phpjabbers.com/appointment-scheduler Version: 2.3 Tested on: Latest Version of Deskto...

6.1CVSS6.2AI score0.02711EPSS
SaveExploits4
osv_cve
osv_cve
•added 2020/12/15 9:15 p.m.•23 views

CVE-2020-35416

Multiple cross-site scripting XSS vulnerabilities exist in PHPJabbers Appointment Scheduler 2.3, in the index.php admin login webpage with different request parameters, allows remote attackers to inject arbitrary web script or HTML...

6.1CVSS6.4AI score0.02711EPSS
SaveExploits4References3
NVD
NVD
•added 2020/12/15 9:15 p.m.•30 views

CVE-2020-35416

Multiple cross-site scripting XSS vulnerabilities exist in PHPJabbers Appointment Scheduler 2.3, in the index.php admin login webpage with different request parameters, allows remote attackers to inject arbitrary web script or HTML...

6.1CVSS6.2AI score0.02711EPSS
SaveExploits4References3
Prion
Prion
•added 2020/12/15 9:15 p.m.•13 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities exist in PHPJabbers Appointment Scheduler 2.3, in the index.php admin login webpage with different request parameters, allows remote attackers to inject arbitrary web script or HTML...

4.3CVSS6.1AI score0.02711EPSS
SaveExploits4References3Affected Software1
Cvelist
Cvelist
•added 2020/12/15 8:50 p.m.•34 views

CVE-2020-35416

Multiple cross-site scripting XSS vulnerabilities exist in PHPJabbers Appointment Scheduler 2.3, in the index.php admin login webpage with different request parameters, allows remote attackers to inject arbitrary web script or HTML...

6.2AI score0.02711EPSS
SaveExploits4References3
CVE
CVE
•added 2020/12/15 8:50 p.m.•81 views

CVE-2020-35416

CVE-2020-35416 concerns PHPJabbers Appointment Scheduler v2.3. The vulnerability is a cross-site scripting (XSS) flaw in the admin login page (index.php), exploitable via various request parameters to inject script/HTML. Public sources describe both reflected XSS vectors and PoC parameters (e.g.,...

6.1CVSS6.1AI score0.02711EPSS
SaveExploits4References3Affected Software1
Packet Storm
Packet Storm
•added 2020/12/15 12:00 a.m.•311 views

PHPJabbers Appointment Scheduler 2.3 Cross Site Scripting

Exploit Title: PHPJabbers Appointment Scheduler 2.3 - Reflected XSS Cross-Site Scripting Date: 2020-12-14 Exploit Author: Andrea Intilangelo Vendor Homepage: https://www.phpjabbers.com Software Link: https://www.phpjabbers.com/appointment-scheduler Version: 2.3 Tested on: Latest Version of Deskto...

6.4AI score0.02711EPSS
SaveExploits4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/15 12:00 a.m.•4 views

CVE-2020-35416: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities exist in PHPJabbers Appointment Scheduler 2.3, in the index.php admin login webpage with different request parameters, allows remote attackers to inject arbitrary web script or HTML...

6.1CVSS5.8AI score0.02711EPSS
SaveExploits4References2
Positive Technologies
Positive Technologies
•added 2020/12/15 12:00 a.m.•11 views

PT-2020-6157 · Phpjabbers · Phpjabbers Appointment Scheduler

Name of the Vulnerable Software and Affected Versions: PHPJabbers Appointment Scheduler version 2.3 Description: The issue is related to cross-site scripting XSS vulnerabilities in the admin login webpage of the PHPJabbers Appointment Scheduler. These vulnerabilities allow remote attackers to...

6.4CVSS6.2AI score0.02711EPSS
SaveExploits4References8
CNNVD
CNNVD
•added 2020/12/15 12:00 a.m.•22 views

Phpjabbers Appointment Scheduler 跨站脚本漏洞

Phpjabbers Appointment Scheduler is a Php-based appointment scheduler plugin for planning time and scheduling meetings from Phpjabbers Serbia. PHPJabbers Appointment Scheduler 2.3 is vulnerable to a cross-site scripting vulnerability that originates in the index.php administrative login page with...

6.1CVSS6.4AI score0.02711EPSS
SaveExploits4References6
NVD
NVD
•added 2020/12/02 10:15 p.m.•30 views

CVE-2020-29283

An SQL injection vulnerability was discovered in Online Doctor Appointment Booking System PHP and Mysql via the q parameter to getuser.php...

9.8CVSS9.8AI score0.01335EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2020/12/02 10:15 p.m.•16 views

CVE-2020-29283

An SQL injection vulnerability was discovered in Online Doctor Appointment Booking System PHP and Mysql via the q parameter to getuser.php...

9.8CVSS7.3AI score0.01335EPSS
SaveExploits1References2
Rows per page
Query Builder