745 matches found
RemoteClinic 2.0 - (Multiple) Stored Cross-Site Scripting (XSS) Vulnerability
Exploit Title: RemoteClinic 2.0 - 'Multiple' Stored Cross-Site Scripting XSS Exploit Author: Saud Ahmad Vendor Homepage: https://remoteclinic.io/ Software Link: https://github.com/remoteclinic/RemoteClinic Version: 2.0 Tested on: Windows 10 CVE : CVE-2021-30030, CVE-2021-30034, CVE-2021-30039,...
Remote Clinic Cross-Site Scripting Vulnerability (CNVD-2021-31665)
Remote Clinic is an open source clinic management system that allows you to remotely manage your clinic via the Web. A stored cross-site scripting vulnerability exists in /medicines in Remote Clinic v2.0. The vulnerability can be exploited to conduct a cross-site scripting attack via the Medicine...
CVE-2021-31327
Stored XSS in Remote Clinic v2.0 in /medicines due to Medicine Name Field...
CVE-2021-31327
Stored XSS in Remote Clinic v2.0 in /medicines due to Medicine Name Field...
CVE-2021-31329
Cross Site Scripting XSS in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php...
CVE-2021-31329
Cross Site Scripting XSS in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php...
CVE-2021-31327
Stored XSS in Remote Clinic v2.0 in /medicines due to Medicine Name Field...
Cross site scripting
Stored XSS in Remote Clinic v2.0 in /medicines due to Medicine Name Field...
Cross site scripting
Cross Site Scripting XSS in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php...
CVE-2021-31327
Stored XSS in Remote Clinic v2.0 in /medicines due to Medicine Name Field...
CVE-2021-31327
Remote Clinic v2.0 contains a stored XSS vulnerability in the /medicines endpoint, exploitable via the Medicine Name field. Public documents from multiple sources (NVD, Red Hat, CNVD, CNNVD, etc.) consistently identify Stored XSS as the impact; exact root cause details (input handling, sanitizati...
CVE-2021-31329
Cross Site Scripting XSS in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php...
CVE-2021-31329
CVE-2021-31329 describes a Cross Site Scripting (XSS) vulnerability in Remote Clinic v2.0, exploitable via the Chat and Personal Address fields on staff/register.php. The connected documents corroborate the issue (CNVD/CNNVD, Red Hat/PRION/CVE lists, and Exploit DB entry referencing Stored XSS in...
RemoteClinic 跨站脚本漏洞
Remote Clinic is an open source clinic management system that allows you to remotely manage your clinic via the Web. A stored cross-site scripting vulnerability exists in /medicines in Remote Clinic v2.0. The vulnerability can be exploited to conduct a cross-site scripting attack via the Medicine...
RemoteClinic 跨站脚本漏洞
Remote Clinic is an open source clinic management system that allows you to remotely manage your clinic via the Web. A cross-site scripting vulnerability exists in Remote Clinic v2.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the "Chat" and "Personal Address"...
PT-2021-11337 · Unknown · Openclinic Ga
Name of the Vulnerable Software and Affected Versions: OpenClinic GA version 5.173.3 Description: An exploitable SQL injection issue exists in the getAssets.jsp page. The serialnumber parameter in this page is vulnerable to unauthenticated SQL injection. An attacker can trigger this issue by maki...
CVE-2021-30034
Cross Site Scripting XSS in Remote Clinic v2.0 via the Symptons field on patients/register-report.php...
CVE-2021-30034
Cross Site Scripting XSS in Remote Clinic v2.0 via the Symptons field on patients/register-report.php...