307 matches found
CVE-2025-7516 code-projects Online Appointment Booking System cancelbookingpatient.php sql injection
A vulnerability classified as critical was found in code-projects Online Appointment Booking System 1.0. This vulnerability affects unknown code of the file /cancelbookingpatient.php. The manipulation of the argument appointment leads to sql injection. The attack can be initiated remotely. The...
CVE-2025-7516
The CVE-2025-7516 entry concerns code-projects Online Appointment Booking System 1.0. The vulnerability is a SQL injection in the file /cancelbookingpatient.php, triggered by manipulating the appointment parameter. It is remotely exploitable, with an exploit publicly disclosed. Affected component...
CVE-2025-7516 code-projects Online Appointment Booking System cancelbookingpatient.php sql injection
A vulnerability classified as critical was found in code-projects Online Appointment Booking System 1.0. This vulnerability affects unknown code of the file /cancelbookingpatient.php. The manipulation of the argument appointment leads to sql injection. The attack can be initiated remotely. The...
CVE-2025-7515 code-projects Online Appointment Booking System ulocateus.php sql injection
A vulnerability classified as critical has been found in code-projects Online Appointment Booking System 1.0. This affects an unknown part of the file /ulocateus.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...
CVE-2025-7515 code-projects Online Appointment Booking System ulocateus.php sql injection
A vulnerability classified as critical has been found in code-projects Online Appointment Booking System 1.0. This affects an unknown part of the file /ulocateus.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...
CVE-2025-7515
CVE-2025-7515 affects code-projects Online Appointment Booking System 1.0. The vulnerability is in /ulocateus.php and arises from manipulation of the doctorname parameter, enabling SQL injection. It can be exploited remotely and exploits have been publicly disclosed. A fix is available and should...
PT-2025-29384 · Code Projects · Online Appointment Booking System
Name of the Vulnerable Software and Affected Versions: code-projects Online Appointment Booking System version 1.0 Description: A critical issue has been identified in the processing of the /getdoctordaybooking.php file. Manipulation of the cid argument can lead to SQL injection. This attack can ...
PT-2025-29358 · Code Projects · Online Appointment Booking System
Name of the Vulnerable Software and Affected Versions: code-projects Online Appointment Booking System version 1.0 Description: A critical issue exists in code-projects Online Appointment Booking System 1.0. The vulnerability is located in an unknown part of the /ulocateus.php file. Manipulation ...
PT-2025-29386 · Code Projects · Online Appointment Booking System
Name of the Vulnerable Software and Affected Versions: code-projects Online Appointment Booking System version 1.0 Description: A critical issue exists in code-projects Online Appointment Booking System. The vulnerability is located in the /get town.php file and involves SQL injection through...
CVE-2025-7540: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in code-projects Online Appointment Booking System 1.0. Affected is an unknown function of the file /getclinic.php. The manipulation of the argument townid leads to sql injection. It is possible to launch the attack remotely. The exploi...
CVE-2025-7539: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in code-projects Online Appointment Booking System 1.0. This issue affects some unknown processing of the file /getdoctordaybooking.php. The manipulation of the argument cid leads to sql injection. The attack may be initiated...
CVE-2025-7517: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in code-projects Online Appointment Booking System 1.0. This issue affects some unknown processing of the file /getDay.php. The manipulation of the argument cidval leads to sql injection. The attack may be initiated remotely. The...
CVE-2025-7515: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in code-projects Online Appointment Booking System 1.0. This affects an unknown part of the file /ulocateus.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...
CVE-2025-7541: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in code-projects Online Appointment Booking System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /gettown.php. The manipulation of the argument countryid leads to sql injection. The attack can be launched...
PT-2025-29360 · Code Projects · Online Appointment Booking System
Name of the Vulnerable Software and Affected Versions: code-projects Online Appointment Booking System version 1.0 Description: A critical issue exists in code-projects Online Appointment Booking System 1.0 related to the processing of the /getDay.php file. Manipulation of the cidval argument can...
PT-2025-29359 · Code Projects · Online Appointment Booking System
Name of the Vulnerable Software and Affected Versions: code-projects Online Appointment Booking System version 1.0 Description: A critical vulnerability exists in code-projects Online Appointment Booking System. The vulnerability is due to a SQL injection flaw within the /cancelbookingpatient.php...
CVE-2025-7516: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in code-projects Online Appointment Booking System 1.0. This vulnerability affects unknown code of the file /cancelbookingpatient.php. The manipulation of the argument appointment leads to sql injection. The attack can be initiated remotely. The...
PT-2025-29385 · Code Projects · Online Appointment Booking System
Name of the Vulnerable Software and Affected Versions: code-projects Online Appointment Booking System version 1.0 Description: A critical vulnerability exists in code-projects Online Appointment Booking System 1.0. The issue involves a SQL injection vulnerability in an unknown function within th...
CVE-2023-49173
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 10to8 Sign In Scheduling Online Appointment Booking System allows Stored XSS.This issue affects Sign In Scheduling Online Appointment Booking System: from n/a through 1.0.9...
CVE-2023-24388
Cross-Site Request Forgery CSRF vulnerability in WpDevArt Booking calendar, Appointment Booking System plugin = 3.2.3 versions affects plugin forms actions create, duplicate, edit, delete...