cadoganclinic.com Cross Site Scripting vulnerability OBB-3937898

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Clinic Queuing System Cross-Site Scripting Vulnerability

Clinic Queuing System is a clinic queuing system by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in Clinic Queuing System version 1.0, which stems from a cross-site scripting attack due to incorrect manipulation of the parameters Full Name, Contact, and...

PT-2024-37501 · Sourcecodester · Clinic Queuing System

Name of the Vulnerable Software and Affected Versions: SourceCodester Clinic Queuing System version 1.0 Description: A vulnerability was found in the Clinic Queuing System, affecting the function save patient of the file patient side.php. The manipulation of the arguments Full Name, Contact, and...

CVE-2024-4809

A vulnerability has been found in SourceCodester Open Source Clinic Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file setting.php. The manipulation of the argument logo leads to unrestricted upload. The attack can be launched...

CVE-2024-4809

A vulnerability has been found in SourceCodester Open Source Clinic Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file setting.php. The manipulation of the argument logo leads to unrestricted upload. The attack can be launched...

Open Source Clinic Management System 代码问题漏洞

BigProf Online Clinic Management System is an online clinic management system from BigProf, Inc. A code issue vulnerability exists in Open Source Clinic Management System version 1.0, which stems from the parameter logo in the file setting.php that can lead to unrestricted uploads...

CVE-2024-4809

CVE-2024-4809 affects SourceCodester Open Source Clinic Management System v1.0. A vulnerability in setting.php allows manipulation of the logo parameter to trigger unrestricted file uploads. Exploitation is remote and the exploit has been publicly disclosed (VDB-263929). Several connected sources...

CVE-2024-4809 SourceCodester Open Source Clinic Management System setting.php unrestricted upload

A vulnerability has been found in SourceCodester Open Source Clinic Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file setting.php. The manipulation of the argument logo leads to unrestricted upload. The attack can be launched...

CVE-2024-4809 SourceCodester Open Source Clinic Management System setting.php unrestricted upload

A vulnerability has been found in SourceCodester Open Source Clinic Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file setting.php. The manipulation of the argument logo leads to unrestricted upload. The attack can be launched...

PT-2024-32987 · Sourcecodester · Sourcecodester Open Source Clinic Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Open Source Clinic Management System version 1.0 Description: A critical issue has been found in the SourceCodester Open Source Clinic Management System, affecting an unknown functionality of the file setting.php. The...

Man Who Mass-Extorted Psychotherapy Patients Gets Six Years

A 26-year-old Finnish man was sentenced to more than six years in prison today after being convicted of hacking into an online psychotherapy clinic, leaking tens of thousands of patient therapy records, and attempting to extort the clinic and patients. On October 21, 2020, the Vastaamo...

totnessportsinjuryclinic.com Cross Site Scripting vulnerability OBB-3917517

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vancouverlaserskincareclinic.com Cross Site Scripting vulnerability OBB-3916494

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mobilepsych.clinic Cross Site Scripting vulnerability OBB-3915283

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

universum.clinic Cross Site Scripting vulnerability OBB-3910262

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MJM Clinic < 1.1.23 - Authenticated (Editor+) Stored Cross-Site Scripting

Description The MJM Clinic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via settings in all versions up to, and including, 1.1.22 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level permissions and...

CVE-2024-29096

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matt Manning MJM Clinic.This issue affects MJM Clinic: from n/a through 1.1.22...

CVE-2024-29096

CVE-2024-29096 is an XSS vulnerability in the MJM Clinic WordPress plugin (MJM Clinic), affecting versions from unspecified up to and including 1.1.22. The root cause is improper neutralization/escaping of user input during web page generation, enabling cross‑site scripting. The Red Hat entry rei...

CVE-2024-29096 WordPress MJM Clinic plugin <= 1.1.22 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matt Manning MJM Clinic.This issue affects MJM Clinic: from n/a through 1.1.22...

CVE-2024-29096 WordPress MJM Clinic plugin <= 1.1.22 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matt Manning MJM Clinic.This issue affects MJM Clinic: from n/a through 1.1.22...