2200 matches found
PT-2025-49948
Name of the Vulnerable Software and Affected Versions wpdevart Booking calendar, Appointment Booking System versions through 3.2.30 Description An issue exists in wpdevart Booking calendar, Appointment Booking System booking-calendar related to incorrectly configured access control security level...
PT-2025-49955
Name of the Vulnerable Software and Affected Versions themetechmount TrueBooker versions through 1.1.0 Description An incorrect access control configuration exists in TrueBooker, potentially allowing unauthorized access. The issue is a missing authorization check. Recommendations Versions prior t...
WordPress plugin Booking calendar, Appointment Booking System 安全漏洞
WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability exists in the...
EUVD-2025-201798
SQL injection vulnerability in /php/apipatientschedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter...
CVE-2025-64081
SQL injection vulnerability in /php/apipatientschedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter...
CVE-2025-64081
SQL injection vulnerability in /php/apipatientschedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter...
CVE-2025-64081
CVE-2025-64081 is a SQL injection in SourceCodester’s Patients Waiting Area Queue Management System v1, affecting the file /php/api_patient_schedule.php via the appointmentID parameter. The root cause is improper input validation/sanitization, enabling attackers to execute arbitrary SQL commands....
SourceCodester Patients Waiting Area Queue Management System SQL注入漏洞
SourceCodester Patients Waiting Area Queue Management System is SourceCodester open source a patient waiting area queue management system. SourceCodester Patients Waiting Area Queue Management System v1 version exists SQL injection vulnerability , the vulnerability stems from /...
CVE-2025-64081
SQL injection vulnerability in /php/apipatientschedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter...
CVE-2025-64081
SQL injection vulnerability in /php/apipatientschedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter...
EUVD-2025-201445
Nextcloud Calendar is a calendar app for Nextcloud. Prior to 4.7.19, 5.5.6, and 6.0.1, the calendar app allowed blindly booking appointments with a squential ID without known the appointment token. This vulnerability is fixed in 4.7.19, 5.5.6, and 6.0.1...
Calendar app allowed booking appointments without the generated token
None...
CVE-2025-65358
Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointment.php...
EUVD-2025-200279
Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointment.php...
CVE-2025-65358
Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointment.php...
CVE-2025-65358
Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointment.php...
CVE-2025-65358
Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointment.php...
PT-2025-48713
Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointment.php...
CVE-2025-65358
Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointment.php...
Edoc-doctor-appointment-system 安全漏洞
Edoc-doctor-appointment-system is a simple web project for e-channels by HashenUdara Personal Developer. A security vulnerability exists in Edoc-doctor-appointment-system version v1.0.1, which stems from the docid parameter in /admin/appointment.php being susceptible to SQL injection attacks...