Lucene search
+L

2131 matches found

CNNVD
CNNVD
added 2025/07/13 12:0 a.m.6 views

Code-Projects Online Appointment Booking System 注入漏洞

Online Appointment Booking System is an online appointment booking system. Online Appointment Booking System suffers from a SQL injection vulnerability that stems from an error in the parameter cidval in the file /getDay.php that lacks validation of externally entered SQL statements. The...

9.8CVSS8.2AI score0.00394EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/07/13 12:0 a.m.11 views

PT-2025-29360 · Code Projects · Online Appointment Booking System

Name of the Vulnerable Software and Affected Versions: code-projects Online Appointment Booking System version 1.0 Description: A critical issue exists in code-projects Online Appointment Booking System 1.0 related to the processing of the /getDay.php file. Manipulation of the cidval argument can...

9.8CVSS7.4AI score0.00394EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
added 2025/07/13 12:0 a.m.12 views

PT-2025-29358 · Code Projects · Online Appointment Booking System

Name of the Vulnerable Software and Affected Versions: code-projects Online Appointment Booking System version 1.0 Description: A critical issue exists in code-projects Online Appointment Booking System 1.0. The vulnerability is located in an unknown part of the /ulocateus.php file. Manipulation ...

9.8CVSS7.4AI score0.00394EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/07/13 12:0 a.m.8 views

Code-Projects Online Appointment Booking System 注入漏洞

Online Appointment Booking System is an online appointment booking system. Online Appointment Booking System suffers from a SQL injection vulnerability that stems from an error in the parameter countryid in file /gettown.php that lacks validation of an externally entered SQL statement. An attacke...

9.8CVSS7.9AI score0.00454EPSS
SaveExploits1References6
OSV
OSV
added 2025/07/07 8:15 p.m.5 views

CVE-2025-7142

A vulnerability, which was classified as problematic, has been found in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /panel/search-appointment.php. The manipulation leads to cross site scripting. The attack may be launched...

5.4CVSS3.8AI score0.00267EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/07/07 12:0 a.m.5 views

SourceCodester Best Salon Management System 代码注入漏洞

SourceCodester Best Salon Management System is a SourceCodester open source salon management system. A code injection vulnerability exists in version 1.0 of the SourceCodester Best Salon Management System, which originates from an incorrect operation of the file /panel/search-appointment.php, and...

5.4CVSS4.2AI score0.00267EPSS
SaveExploits1References6
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/02 8:50 a.m.7 views

Malicious code in patient-appointment-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fb18be6d022e135df2a66c90067908650077628db97d427a1058b8d3877bae6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2025/07/02 8:50 a.m.5 views

MAL-2025-5571 Malicious code in patient-appointment-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fb18be6d022e135df2a66c90067908650077628db97d427a1058b8d3877bae6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Patchstack
Patchstack
added 2025/07/01 10:25 p.m.4 views

WordPress Booking calendar, Appointment Booking System plugin <= 3.2.17 - Unauthenticated Time-Based SQL Injection via 'wpdevart_id' vulnerability

Unauthenticated Time-Based SQL Injection via 'wpdevartid' vulnerability discovered by shaman0x01 in WordPress Plugin Booking calendar, Appointment Booking System versions = 3.2.17...

8.1AI score
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/06/30 12:0 a.m.6 views

SourceCodester Best Salon Management System 注入漏洞

SourceCodester Best Salon Management System is a SourceCodester open source salon management system. SourceCodester Best Salon Management System version 1.0 suffers from an injection vulnerability, which originates from a SQL injection due to the incorrect operation of the parameter searchdata in...

8.8CVSS6.9AI score0.00366EPSS
SaveExploits1References6
OSV
OSV
added 2025/06/25 12:15 a.m.5 views

CVE-2025-6583

A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /view-appointment.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The...

8.8CVSS5.7AI score0.00369EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/24 12:0 a.m.8 views

SourceCodester Best Salon Management System 安全漏洞

SourceCodester Best Salon Management System is an open source salon management system from SourceCodester. A security vulnerability exists in SourceCodester Best Salon Management System version 1.0, which stems from improper handling of the viewid parameter in the view-appointment.php file, which...

8.8CVSS7AI score0.00369EPSS
SaveExploits1References2
GithubExploit
GithubExploit
added 2025/06/14 7:8 a.m.418 views

Exploit for CVE-2025-46181

CVE-2025-46181 - Reflected XSS in an Online Appointment Bookin...

6.7AI score
SaveExploits1
OSV
OSV
added 2025/06/06 3:15 a.m.8 views

CVE-2025-5712

A vulnerability has been found in SourceCodester Open Source Clinic Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /appointment.php. The manipulation of the argument patient leads to sql injection. The attack can be launche...

6.9CVSS5.8AI score0.00364EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/06 12:0 a.m.7 views

SourceCodester Open Source Clinic Management System 注入漏洞

SourceCodester Open Source Clinic Management System is an open source clinic management system from SourceCodester Open Source. An injection vulnerability exists in SourceCodester Open Source Clinic Management System version 1.0, which results from SQL injection due to incorrect manipulation of t...

7.5CVSS7.8AI score0.00364EPSS
SaveExploits1References5
OSV
OSV
added 2025/05/30 8:15 p.m.5 views

CVE-2025-5360

A vulnerability classified as critical was found in Campcodes Online Hospital Management System 1.0. This vulnerability affects unknown code of the file /book-appointment.php. The manipulation of the argument doctor leads to sql injection. The attack can be initiated remotely. The exploit has bee...

9.8CVSS5.8AI score0.00432EPSS
SaveExploits1References5
OSV
OSV
added 2025/05/30 7:15 p.m.7 views

CVE-2025-5359

A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. This affects an unknown part of the file /appointment-history.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

9.8CVSS5.8AI score0.00432EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/05/30 6:31 p.m.14 views

CVE-2025-5359 Campcodes Online Hospital Management System appointment-history.php sql injection

A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. This affects an unknown part of the file /appointment-history.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

7.5CVSS7.5AI score0.00432EPSS
SaveExploits1References5
CVE
CVE
added 2025/05/30 6:31 p.m.64 views

CVE-2025-5359

CVE-2025-5359 affects Campcodes Online Hospital Management System version 1.0. The vulnerability is in the file /appointment-history.php, where manipulation of the ID parameter leads to a SQL injection. The issue is exploitable remotely and has been publicly disclosed. Multiple connected sources ...

9.8CVSS7.5AI score0.00432EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/05/30 6:31 p.m.25 views

CVE-2025-5359 Campcodes Online Hospital Management System appointment-history.php sql injection

A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. This affects an unknown part of the file /appointment-history.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

7.5CVSS0.00432EPSS
SaveExploits1References5
Rows per page
Query Builder