Lucene search
+L

2128 matches found

CNNVD
CNNVD
added 2025/11/12 12:0 a.m.5 views

WordPress plugin Booking Calendar | Appointment Booking | Bookit 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

7.5CVSS6.1AI score0.00251EPSS
SaveExploits0References2
CNVD
CNVD
added 2025/11/11 12:0 a.m.6 views

WordPress Easy Appointments plugin cross-site scripting vulnerability

WordPress Easy Appointments plugin is a free WordPress appointment management plugin, mainly used to create and manage service appointment system, support multi-location, multi-service, multi-staff appointment function. A cross-site scripting vulnerability exists in the WordPress Easy Appointment...

6.1CVSS6.4AI score0.00236EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/11/07 6:30 p.m.7 views

EUVD-2025-38258

A SQL injection vulnerability exists in the SourceCodester PQMS Patient Queue Management System 1.0 in the apipatientschedule.php endpoint. The appointmentID parameter is not properly sanitized, allowing attackers to execute arbitrary SQL commands...

7.9AI score0.00235EPSS
SaveExploits1References3
NVD
NVD
added 2025/11/07 6:15 p.m.7 views

CVE-2025-63718

A SQL injection vulnerability exists in the SourceCodester PQMS Patient Queue Management System 1.0 in the apipatientschedule.php endpoint. The appointmentID parameter is not properly sanitized, allowing attackers to execute arbitrary SQL commands...

6.5CVSS0.00235EPSS
SaveExploits1References2
OSV
OSV
added 2025/11/07 6:15 p.m.6 views

CVE-2025-63718

A SQL injection vulnerability exists in the SourceCodester PQMS Patient Queue Management System 1.0 in the apipatientschedule.php endpoint. The appointmentID parameter is not properly sanitized, allowing attackers to execute arbitrary SQL commands...

6.5CVSS6.1AI score0.00235EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/11/07 12:0 a.m.6 views

SourceCodester PQMS 安全漏洞

SourceCodester PQMS is an open source product quality management system from SourceCodester. A security vulnerability exists in SourceCodester PQMS version 1.0, which stems from improper cleanup of the appointmentID parameter in the apipatientschedule.php endpoint, which could lead to the executi...

6.5CVSS7.6AI score0.00235EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/11/07 12:0 a.m.9 views

PT-2025-45480

Name of the Vulnerable Software and Affected Versions SourceCodester PQMS version 1.0 Description A SQL injection issue exists in the Patient Queue Management System. The api patient schedule.php endpoint is affected because the appointmentID parameter does not receive proper sanitization,...

8.1AI score0.00235EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2025/10/14 6:44 a.m.12 views

CVE-2025-11664

A security vulnerability has been detected in Campcodes Online Beauty Parlor Management System 1.0. The impacted element is an unknown function of the file /admin/search-appointment.php. Such manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The...

9.8CVSS7AI score0.0042EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/10/13 6:2 a.m.15 views

CVE-2025-11664 Campcodes Online Beauty Parlor Management System search-appointment.php sql injection

A security vulnerability has been detected in Campcodes Online Beauty Parlor Management System 1.0. The impacted element is an unknown function of the file /admin/search-appointment.php. Such manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The...

5.8CVSS0.0042EPSS
SaveExploits1References5
CVE
CVE
added 2025/10/13 6:2 a.m.18 views

CVE-2025-11664

Campcodes Online Beauty Parlor Management System 1.0 is affected. The vulnerability is a SQL injection in the /admin/search-appointment.php file, caused by manipulation of the searchdata argument in an unknown function. It is a network-based issue (remote exploitation) with publicly disclosed exp...

9.8CVSS5.2AI score0.0042EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/13 6:2 a.m.5 views

CVE-2025-11664 Campcodes Online Beauty Parlor Management System search-appointment.php sql injection

A security vulnerability has been detected in Campcodes Online Beauty Parlor Management System 1.0. The impacted element is an unknown function of the file /admin/search-appointment.php. Such manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The...

5.8CVSS5AI score0.0042EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/10/13 12:0 a.m.8 views

CampCodes Online Beauty Parlor Management System SQL注入漏洞

CampCodes Online Beauty Parlor Management System is an online beauty parlor management system from CampCodes Philippines. A SQL injection vulnerability exists in CampCodes Online Beauty Parlor Management System version 1.0, which stems from an incorrect manipulation of the parameter searchdata in...

9.8CVSS5.7AI score0.0042EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/10/13 12:0 a.m.10 views

PT-2025-41758

Name of the Vulnerable Software and Affected Versions Campcodes Online Beauty Parlor Management System version 1.0 Description A security issue exists in Campcodes Online Beauty Parlor Management System version 1.0. Manipulation of the searchdata argument in an unknown function within the...

5.8CVSS4.8AI score0.0042EPSS
SaveExploits1References8
CNVD
CNVD
added 2025/10/13 12:0 a.m.4 views

Beauty Parlour Management System new-appointment.php File SQL Injection Vulnerability

Beauty Parlour Management System is an application system. Beauty Parlour Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter delid in the file /admin/new-appointment.php. An attacker can...

9.8CVSS8.3AI score0.00441EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/10/12 9:16 p.m.14 views

CVE-2025-11614

A vulnerability was identified in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /panel/edit-appointment.php. Such manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit is...

9.8CVSS7.2AI score0.00383EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/11 9:30 p.m.6 views

EUVD-2025-33876

A vulnerability was identified in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /panel/edit-appointment.php. Such manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit is...

7.5CVSS6.7AI score0.00383EPSS
SaveExploits1References6
NVD
NVD
added 2025/10/11 9:15 p.m.17 views

CVE-2025-11614

A vulnerability was identified in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /panel/edit-appointment.php. Such manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit is...

9.8CVSS0.00383EPSS
SaveExploits1References5
CVE
CVE
added 2025/10/11 8:32 p.m.27 views

CVE-2025-11614

SourceCodester Best Salon Management System 1.0 is affected by an SQL injection in /panel/edit-appointment.php via the editid parameter. The issue is exploitable remotely and is supported by publicly available exploits; multiple sources confirm impact on confidentiality, integrity, and availabili...

9.8CVSS6.9AI score0.00383EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/11 8:32 p.m.6 views

CVE-2025-11614 SourceCodester Best Salon Management System edit-appointment.php sql injection

A vulnerability was identified in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /panel/edit-appointment.php. Such manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit is...

7.5CVSS6.9AI score0.00383EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/10/11 12:0 a.m.7 views

SourceCodester Best Salon Management System SQL注入漏洞

SourceCodester Best Salon Management System is a SourceCodester open source salon management system. A SQL injection vulnerability exists in SourceCodester Best Salon Management System version 1.0, which stems from incorrect manipulation of the parameter editid in the file...

9.8CVSS7.8AI score0.00383EPSS
SaveExploits1References5
Rows per page
Query Builder