aws-doctor

aws-doctor...

CVE-2025-45805

CVE-2025-45805 PoC لـ CVE-2025-45805 المنتج المتأثر: نظام إدارة مواعيد الأطباء المطور: phpgurukul الإصدار: 1.0 نوع الثغرة: تخزين Cross-Site Scripting XSS الوصف: يمكن لمستخدم طبيب مُوثَّق حقن أكواد JavaScript عشوائية في حقل ملف الطبيب الاسم/رقم الموظف. يتم عرض الحمولة الضارة دون تنقية عندما يختار...

CVE-2022-28601

CVE-2022-28601 Une vulnérabilité de contournement de l'authentification à deux facteurs 2FA dans le « Simple 2FA Plugin for Moodle » de LMS Doctor Détails de la vulnérabilité Risque : Moyen Fournisseur : LMS Doctor - Simple 2 Factor Authentication Plugin For Moodle Divulgué par : Flaviu Popescu...

Doctor Appointment System 1.0 - SQL Injection

SQL injection in the expertise parameter in searchresult.php in Doctor Appointment System v1.0. id: CVE-2021-27124 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: medium description: | SQL injection in the expertise parameter in searchresult.php in Doctor...

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via lastname parameter. id: CVE-2021-27316 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind SQ...

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter. id: CVE-2021-27315 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind...

Hospital Management System 1.0 - Cross-Site Scripting

Hospital Management System 1.0 contains a cross-site scripting vulnerability via the searchdata parameter in doctor/search.php and patient-search.php. id: CVE-2021-39411 info: name: Hospital Management System 1.0 - Cross-Site Scripting author: arafatansari severity: high description: | Hospital...

Doctor Appointment System 1.0 - SQL Injection

SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page. id: CVE-2021-27314 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: critical description: |...

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter. id: CVE-2021-27320 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind S...

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via email parameter. id: CVE-2021-27319 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind SQL...

CVE-2021-25791-Multiple-Stored-XSS

CVE-2021-25791-Multiple-Stored-XSS : Multiples XSS stockés dans Online Doctor Appointment System De multiples XSS stockés et authentifiés existent dans Online Doctor Appointment System V1.0 Lien du logiciel :...

CVE-2022-28986

CVE-2022-28986 ثغرة المراجع المباشرة غير الآمنة للكائنات Insecure Direct Object References - IDOR في إضافة "Simple 2FA Plugin for Moodle" من LMS Doctor تفاصيل الثغرة الخطورة: حرجة الجهة المطورة: LMS Doctor - Simple 2 Factor Authentication Plugin For Moodle تم الكشف بواسطة: Flaviu Popescu الوصف:...

CVE-2026-78211

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

EUVD-2026-64706

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

CVE-2026-78211 4MOSAn Security Technology｜4MOSAn GCB Doctor - OS Command Injection

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

CVE-2026-78211

4MOSAn GCB Doctor by 4MOSAn Security Technology suffers from an OS Command Injection vulnerability caused by an unremoved ADOdb test page parameter . Unauthenticated remote attackers can exploit this to execute arbitrary system commands on the server, resulting in high impact across confidentiali...

cloud-doctor

cloud-doctor أمر واحد يقيم حساب السحابة بالكامل — التكوينات الخاطئة، ونقص المراقبة، والحالة الأمنية، مرتبة وفقًا لأهم خمسة أشياء يجب إصلاحها أولاً. وجِّهه إلى AWS، Cloudflare، Vercel، Supabase، Render، Fly.io، أو Railway وسيعود بتقييم، وما هو مكسور، وإصلاح لكل مشكلة — مكتفٍ ذاتيًا بحيث يمكن تسليم...

PT-2026-79818

Name of the Vulnerable Software and Affected Versions 4MOSAn GCB Doctor affected versions not specified Description An OS Command Injection issue exists where unauthenticated remote attackers can execute arbitrary system commands on the server. This is possible through a parameter in an unremoved...

WordPress KiviCare plugin < 4.5.2 - Doctor/Receptionist+ SQL Injection via settings/listing REST Endpoint vulnerability

Doctor/Receptionist+ SQL Injection via settings/listing REST Endpoint vulnerability discovered by Mokksh Parekh in WordPress Plugin KiviCare versions 4.5.2...

CVE-2026-19384

A weakness has been identified in SourceCodester Simple Doctors Appointment System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=setappointment. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has...