745 matches found
PT-2025-24002 · Sourcecodester · Sourcecodester Open Source Clinic Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Open Source Clinic Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /appointment.php. The manipulation of the patient argument leads to SQL...
SourceCodester Open Source Clinic Management System 代码问题漏洞
SourceCodester Open Source Clinic Management System is an open source clinic management system from SourceCodester Open Source. A code issue vulnerability exists in version 1.0 of the SourceCodester Open Source Clinic Management System, which stems from an unrestricted upload due to incorrect...
SourceCodester Open Source Clinic Management System 注入漏洞
SourceCodester Open Source Clinic Management System is an open source clinic management system from SourceCodester. An injection vulnerability exists in SourceCodester Open Source Clinic Management System version 1.0, which is caused by an incorrect manipulation of the doctorname parameter in the...
CVE-2024-48597
Online Clinic Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /success/editp.php?action=edit...
CVE-2024-29096
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matt Manning MJM Clinic.This issue affects MJM Clinic: from n/a through 1.1.22...
CVE-2024-29140
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matt Manning MJM Clinic allows Stored XSS.This issue affects MJM Clinic: from n/a through 1.1.22...
CVE-2024-6273
A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been declared as problematic. Affected by this vulnerability is the function savepatient of the file patientside.php. The manipulation of the argument Full Name/Contact/Address leads to cross site scripting. The attack...
CVE-2024-40393
Online Clinic Management System In PHP With Free Source code v1.0 was discovered to contain a SQL injection vulnerability via the user parameter at login.php...
CVE-2024-0265
A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php of the component GET Parameter Handler. The manipulation of the argument page leads to file inclusion. The attack may be initiate...
CVE-2023-48126
An issue in Luxe Beauty Clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
CVE-2023-44001
An issue in Ailand clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
CVE-2023-38848
An issue in rmc R Beauty CLINIC Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...
CVE-2023-47367
The leakage of channel access token in platinum clinic Line 13.6.1 allows remote attackers to send malicious notifications to victims...
CVE-2023-1036
A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /APR/signup.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross...
CVE-2023-1037
A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /APR/login.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql...
CVE-2022-36750
Clinic's Patient Management System v1.0 is vulnerable to SQL injection via /pms/updateuser.php?id=...
CVE-2021-39416
Multiple Cross Site Scripting XSS vulnerabilities exists in Remote Clinic v2.0 in 1 patients/register-patient.php via the a Contact, b Email, c Weight, d Profession, e refcontact, f address, g gender, h age, and i serial parameters; in 2 patients/edit-patient.php via the a Contact, b Email, c...
CVE-2021-30034
Cross Site Scripting XSS in Remote Clinic v2.0 via the Symptons field on patients/register-report.php...