Lucene search
+L

13 matches found

Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•13 views

PT-2026-86621

Name of the Vulnerable Software and Affected Versions sfturing ssm pro versions prior to 627f426331da8086ce8fff2017d65b1ddef384f8 Description A cross site scripting issue exists in the Order Endpoint component within the file ssm pro/src/main/java/cn/sfturing/web/OrderController.java. A remote...

5.3CVSS5AI score0.00449EPSS
SaveExploits0References7
NVD
NVD
•added 2026/06/29 7:16 a.m.•26 views

CVE-2026-13542

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /doctorprofile.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS0.00333EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/06/29 6:15 a.m.•17 views

CVE-2026-13542 itsourcecode Hospital Management System doctorprofile.php sql injection

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /doctorprofile.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/06/29 6:15 a.m.•23 views

EUVD-2026-40042

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /doctorprofile.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS5.7AI score0.00333EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/06/29 6:15 a.m.•63 views

CVE-2026-13542 itsourcecode Hospital Management System doctorprofile.php sql injection

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /doctorprofile.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS0.00333EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/06/29 12:00 a.m.•28 views

PT-2026-53217

Name of the Vulnerable Software and Affected Versions itsourcecode Hospital Management System version 1.0 Description A SQL injection issue exists in the /doctorprofile.php endpoint. This occurs when the doctorname parameter is manipulated, allowing a remote attacker to execute arbitrary SQL...

6.5CVSS7AI score0.00333EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/29 12:00 a.m.•1 views

CVE-2026-13542: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /doctorprofile.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS5.5AI score0.00333EPSS
SaveExploits0References3
CNVD
CNVD
•added 2025/07/18 12:00 a.m.•14 views

Online Appointment Booking System ulocateus.php File SQL Injection Vulnerability

Online Appointment Booking System is an online appointment booking system. Online Appointment Booking System suffers from a SQL injection vulnerability that stems from an error in the parameter doctorname in the file /ulocateus.php that lacks validation of externally entered SQL statements. An...

9.8CVSS8.2AI score0.0041EPSS
SaveExploits1References1
OSV
OSV
•added 2025/07/13 4:15 a.m.•15 views

CVE-2025-7515

A vulnerability classified as critical has been found in code-projects Online Appointment Booking System 1.0. This affects an unknown part of the file /ulocateus.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...

9.8CVSS5.8AI score0.0041EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/07/13 12:00 a.m.•15 views

Code-Projects Online Appointment Booking System 注入漏洞

Online Appointment Booking System is an online appointment booking system. Online Appointment Booking System suffers from a SQL injection vulnerability that stems from an error in the parameter doctorname in the file /ulocateus.php that lacks validation of externally entered SQL statements. An...

9.8CVSS8.1AI score0.0041EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/13 12:00 a.m.•1 views

CVE-2025-7515: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Online Appointment Booking System 1.0. This affects an unknown part of the file /ulocateus.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...

9.8CVSS5.5AI score0.0041EPSS
SaveExploits1References1
OSV
OSV
•added 2025/06/06 11:15 a.m.•14 views

CVE-2025-5758

A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. This affects an unknown part of the file /doctor.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

6.9CVSS5.8AI score0.00444EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/06/06 12:00 a.m.•14 views

SourceCodester Open Source Clinic Management System 注入漏洞

SourceCodester Open Source Clinic Management System is an open source clinic management system from SourceCodester. An injection vulnerability exists in SourceCodester Open Source Clinic Management System version 1.0, which is caused by an incorrect manipulation of the doctorname parameter in the...

7.5CVSS7.9AI score0.00444EPSS
SaveExploits1References5
Rows per page
Query Builder