CVE-2026-116255

A vulnerability has been found in PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659351990. Affected is the function detail of the file application/controllers/doc.php of the component URI Sanitizer. The manipulation of the argument uristring leads to path traversal. The attack may be...

EUVD-2026-109713

A vulnerability has been found in PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659351990. Affected is the function detail of the file application/controllers/doc.php of the component URI Sanitizer. The manipulation of the argument uristring leads to path traversal. The attack may be...

CVE-2026-116255 PGYER codefever URI Sanitizer doc.php _detail path traversal

A vulnerability has been found in PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659351990. Affected is the function detail of the file application/controllers/doc.php of the component URI Sanitizer. The manipulation of the argument uristring leads to path traversal. The attack may be...

CVE-2026-116255 PGYER codefever URI Sanitizer doc.php _detail path traversal

A vulnerability has been found in PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659351990. Affected is the function detail of the file application/controllers/doc.php of the component URI Sanitizer. The manipulation of the argument uristring leads to path traversal. The attack may be...

CVE-2026-116255

A path traversal vulnerability exists in the URI Sanitizer component of PGYER codefever (affected up to commit 0c35e60f006f9d558cc33a159baf110659351990). The flaw is located in the _detail function of the application/controllers/doc.php file, where improper handling of the uri_string argument all...

PT-2026-123255

A vulnerability has been found in PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659351990. Affected is the function detail of the file application/controllers/doc.php of the component URI Sanitizer. The manipulation of the argument uri string leads to path traversal. The attack may be...

CVE-2024-11102 SourceCodester Hospital Management System edit-doc.php cross site scripting

A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /vm/doctor/edit-doc.php. The manipulation of the argument name leads to cross site scripting. The attack may be launched...

CVE-2024-11102 SourceCodester Hospital Management System edit-doc.php cross site scripting

A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /vm/doctor/edit-doc.php. The manipulation of the argument name leads to cross site scripting. The attack may be launched...

CVE-2024-11102: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /vm/doctor/edit-doc.php. The manipulation of the argument name leads to cross site scripting. The attack may be launched...

CVE-2023-4443: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Free Hospital Management System for Small Practices 1.0/5.0.12. Affected is an unknown function of the file vm\doctor\edit-doc.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to sql injection. It...

PT-2023-29237 · Sourcecodester · Sourcecodester Free Hospital Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Free Hospital Management System for Small Practices versions 1.0 through 5.0.12 Description: A critical issue has been discovered, allowing for SQL injection through the manipulation of the id00, nic, oldemail, email, spec, and...

CVE-2023-1061: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Doctors Appointment System 1.0. This issue affects some unknown processing of the file /admin/edit-doc.php. The manipulation of the argument email/oldmail leads to sql injection. The attack may be initiated...

HDWiki 5.1 /control/user. php, etc. 2 SQL injection vulnerability

HDWiki description Interactive wiki open source systems HDWiki as China's first with independent intellectual property rights of the Chinese Wiki（Wiki）system, the interactive online（Beijing）Technology Co., Ltd. in 2006 to 11 November 28 the official launch, and strive for domestic and foreign man...

HDWiki 5.1 /control/doc.php SQL injection vulnerability

HDWiki description Interactive wiki open source systems HDWiki as China's first with independent intellectual property rights of the Chinese Wiki（Wiki）system, the interactive online（Beijing）Technology Co., Ltd. in 2006 to 11 November 28 the official launch, and strive for domestic and foreign man...

HDWiKi V5.1 盲注及xss

简要描述： HDWiki 在经过前面的大牛洗礼之后，变得越来越安全了，小菜我也只能找到几个盲注和xss而已 PS：求别忽略 PSS:漏洞是自己的，rank是剑心的，所以.....你懂得 。 详细说明： 在经过前面的大牛洗礼之后，变得越来越安全了，get被不分青红皂白的过滤掉一堆关键字，get注入几乎是不大可能的了，所以我只找了post 1 control/user.php 177 function doaegis 178 $id=$this-post'id'; //vulnerable 179 ifempty$id 180 $this-message-1,'',2; 181 182...

SaurusCMS <=upd 4.7.1 Multiple Remote File Inclusion

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

CVE-2007-3452: Undefined Security Weakness

SQL injection vulnerability in essentials/minutes/doc.php in eDocStore allows remote attackers to execute arbitrary SQL commands via the docid parameter in an inline action...