Lucene search
+L

2125 matches found

RedhatCVE
RedhatCVE
added 2025/11/19 12:11 a.m.13 views

CVE-2025-63513

kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference IDOR vulnerability in the appointment cancellation functionality...

6.5CVSS7AI score0.00263EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/11/19 12:0 a.m.6 views

WordPress plugin Booking Plugin for WordPress Appointments 输入验证错误漏洞

WordPress Booking for Appointments plugin is a tool for implementing appointment management on WordPress websites. The WordPress Booking for Appointments plugin suffers from an input validation error vulnerability that stems from a lack of validation for the tslotapptemail AJAX action, which can ...

5.3CVSS6.8AI score0.00283EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/11/19 12:0 a.m.12 views

PT-2025-47435

The Booking Plugin for WordPress Appointments – Time Slot plugin for WordPress is vulnerable to unauthorized email sending in versions up to, and including, 1.4.7 due to missing validation on the tslot appt email AJAX action. This makes it possible for unauthenticated attackers to send appointmen...

5.3CVSS5.8AI score0.00283EPSS
SaveExploits0References5
NVD
NVD
added 2025/11/18 5:16 p.m.12 views

CVE-2025-63513

kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference IDOR vulnerability in the appointment cancellation functionality...

6.5CVSS0.00263EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/11/18 6:58 a.m.10 views

CVE-2025-13267

A vulnerability was detected in SourceCodester Dental Clinic Appointment Reservation System 1.0. Impacted is an unknown function of the file /success.php. Performing manipulation of the argument username/password results in sql injection. The attack can be initiated remotely. The exploit is now...

9.8CVSS6.5AI score0.00359EPSS
SaveExploits1References1
CVE
CVE
added 2025/11/18 12:0 a.m.17 views

CVE-2025-63513

CVE-2025-63513 affects kishan0725 Hospital Management System v4 with an Insecure Direct Object Reference (IDOR) in the appointment cancellation feature. The vulnerability allows unauthorized access to appointment-related operations without proper authorization checks, per Red Hat and CVE listings...

6.5CVSS6.6AI score0.00263EPSS
SaveExploits1References2Affected Software1
EUVD
EUVD
added 2025/11/18 12:0 a.m.12 views

EUVD-2025-198032

kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference IDOR vulnerability in the appointment cancellation functionality...

6.5AI score0.00263EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/11/18 12:0 a.m.9 views

PT-2025-47367

Name of the Vulnerable Software and Affected Versions kishan0725 Hospital Management System version 4 Description The software contains an Insecure Direct Object Reference IDOR issue within the appointment cancellation functionality. This allows potential unauthorized access and manipulation of...

6.5CVSS6.5AI score0.00263EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/11/18 12:0 a.m.10 views

Hospital Management System 安全漏洞

Hospital Management System is a hospital management software by Pon Aravind Boominathan Individual Developer. A security vulnerability exists in Hospital Management System version v4, which stems from an insecure direct object reference in the Appointment Cancellation feature that could lead to...

6.5CVSS6.6AI score0.00263EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/11/18 12:0 a.m.18 views

CVE-2025-63513

kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference IDOR vulnerability in the appointment cancellation functionality...

0.00263EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/11/18 12:0 a.m.5 views

CVE-2025-63513

kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference IDOR vulnerability in the appointment cancellation functionality...

6.6AI score0.00263EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/11/17 11:13 a.m.16 views

CVE-2025-13248

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown function of the file /php/apipatientschedule.php. This manipulation of the argument appointmentID causes sql injection. The attack can be initiated remotely. The...

9.8CVSS7.4AI score0.00374EPSS
SaveExploits1References1
NVD
NVD
added 2025/11/17 8:16 a.m.6 views

CVE-2025-13267

A vulnerability was detected in SourceCodester Dental Clinic Appointment Reservation System 1.0. Impacted is an unknown function of the file /success.php. Performing manipulation of the argument username/password results in sql injection. The attack can be initiated remotely. The exploit is now...

9.8CVSS0.00359EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/11/17 6:32 a.m.2 views

CVE-2025-13267 SourceCodester Dental Clinic Appointment Reservation System success.php sql injection

A vulnerability was detected in SourceCodester Dental Clinic Appointment Reservation System 1.0. Impacted is an unknown function of the file /success.php. Performing manipulation of the argument username/password results in sql injection. The attack can be initiated remotely. The exploit is now...

6.5CVSS6.4AI score0.00359EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/17 6:32 a.m.16 views

CVE-2025-13267

SourceCodester Dental Clinic Appointment Reservation System 1.0 contains a SQL injection in /success.php, exploitable by manipulating the username/password parameters. The issue is remote and publicly exploited according to multiple sources; impacts include high confidentiality, integrity, and av...

9.8CVSS6.5AI score0.00359EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.5 views

SourceCodester Dental Clinic Appointment SQL注入漏洞

SourceCodester Dental Clinic Appointment is SourceCodester open source a dental clinic appointment system . A SQL injection vulnerability exists in SourceCodester Dental Clinic Appointment version 1.0, which stems from incorrect manipulation of the parameters username/password in the file...

9.8CVSS7AI score0.00359EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/11/16 12:30 p.m.8 views

EUVD-2025-197727

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown function of the file /php/apipatientschedule.php. This manipulation of the argument appointmentID causes sql injection. The attack can be initiated remotely. The...

7.5CVSS6.5AI score0.00374EPSS
SaveExploits1References6
OSV
OSV
added 2025/11/16 11:15 a.m.6 views

CVE-2025-13248

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown function of the file /php/apipatientschedule.php. This manipulation of the argument appointmentID causes sql injection. The attack can be initiated remotely. The...

9.8CVSS5.8AI score0.00374EPSS
SaveExploits1References5
NVD
NVD
added 2025/11/16 11:15 a.m.6 views

CVE-2025-13248

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown function of the file /php/apipatientschedule.php. This manipulation of the argument appointmentID causes sql injection. The attack can be initiated remotely. The...

9.8CVSS0.00374EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/11/16 11:2 a.m.18 views

CVE-2025-13248 SourceCodester Patients Waiting Area Queue Management System api_patient_schedule.php sql injection

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown function of the file /php/apipatientschedule.php. This manipulation of the argument appointmentID causes sql injection. The attack can be initiated remotely. The...

7.5CVSS0.00374EPSS
SaveExploits1References5
Rows per page
Query Builder