Sql injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter...

CVE-2021-27320

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter...

CVE-2021-27316

Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via lastname parameter...

Sql injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via email parameter...

Sql injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter...

CVE-2021-27320

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter...

CVE-2021-27320

Doctor Appointment System 1.0 is affected by a Blind SQL Injection in contactus.php, exploitable via the firstname parameter by an unauthenticated attacker. The issue arises from improper input handling that allows arbitrary SQL execution, with potential data access/manipulation as described in m...

CVE-2021-27319

Summary: CVE-2021-27319 = Blind SQL injection in Doctor Appointment System 1.0, in contactus.php. An unauthenticated attacker can inject SQL through the email parameter, enabling arbitrary queries and potential data exposure/manipulation through the database. Affected software/component: Doctor A...

CVE-2021-27316

Doctor Appointment System 1.0 is affected by a Blind SQL Injection in contactus.php, exploitable by unauthenticated users via the lastname parameter. The CVE entry (CVE-2021-27316) is supported by multiple sources (NVD/Nuclei/RH/others) describing the vulnerability as SQL injection that could all...

CVE-2021-27316

Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via lastname parameter...

CVE-2021-27315

Doctor Appointment System 1.0 is affected by a Blind SQL injection in contactus.php, exploitable via the comment parameter. The root cause is lack of input validation on the comment field, allowing an unauthenticated attacker to inject and execute arbitrary SQL commands. Impact described includes...

CVE-2021-27315

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter...

CVE-2021-27319: Improper Neutralization of Special Elements used in an SQL Command

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via email parameter...

CVE-2021-27315: Improper Neutralization of Special Elements used in an SQL Command

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter...

CVE-2021-27316: Improper Neutralization of Special Elements used in an SQL Command

Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via lastname parameter...

CVE-2021-27320: Improper Neutralization of Special Elements used in an SQL Command

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter...

Sourcecodester Doctor Appointment System Cross-Site Scripting Vulnerability

Sourcecodester Doctor Appointment System is a Sourcecodesterk open source application. Provides an appointment function . Sourcecodester Doctor Appointment System version 1.0 suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client data in the WEB...

CVE-2021-27314

SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page...

CVE-2021-27314

SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page...

Doctor Appointment System 1.0 Cross Site Scripting

Exploit Title: Doctor Appointment System 1.0 - Reflected POST based Cross Site Scripting XSS in email parameter Date: 03-03-2021 CVE: CVE-2021-27321 Exploit Author: Soham Bakore Vendor Homepage: https://www.sourcecodester.com/php/14182/doctor-appointment-system.html Software Link:...