CVE-2025-9772 RemoteClinic edit.php unrestricted upload

A vulnerability was detected in RemoteClinic up to 2.0. This affects an unknown part of the file /staff/edit.php. Performing manipulation of the argument image results in unrestricted upload. The attack can be initiated remotely. The exploit is now public and may be used. This vulnerability only...

CVE-2025-9772

RemoteClinic

CVE-2025-9679

A security vulnerability has been detected in itsourcecode Student Information System 1.0. This affects an unknown function of the file /courseedit1.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

CVE-2025-9754

A flaw has been found in Campcodes Online Hospital Management System 1.0. The impacted element is an unknown function of the file /edit-profile.php of the component Edit Profile Page. Executing manipulation of the argument Username can lead to cross site scripting. The attack may be launched...

CVE-2025-9754

A flaw has been found in Campcodes Online Hospital Management System 1.0. The impacted element is an unknown function of the file /edit-profile.php of the component Edit Profile Page. Executing manipulation of the argument Username can lead to cross site scripting. The attack may be launched...

CVE-2025-9754 Campcodes Online Hospital Management System Edit Profile edit-profile.php cross site scripting

A flaw has been found in Campcodes Online Hospital Management System 1.0. The impacted element is an unknown function of the file /edit-profile.php of the component Edit Profile Page. Executing manipulation of the argument Username can lead to cross site scripting. The attack may be launched...

CVE-2025-9754

CVE-2025-9754 affects Campcodes Online Hospital Management System 1.0, specifically the Edit Profile Page (unknown function in /edit-profile.php). Manipulating the Username parameter may trigger cross-site scripting. The attack can be launched remotely and the exploit has been published. Public r...

CVE-2025-9754 Campcodes Online Hospital Management System Edit Profile edit-profile.php cross site scripting

A flaw has been found in Campcodes Online Hospital Management System 1.0. The impacted element is an unknown function of the file /edit-profile.php of the component Edit Profile Page. Executing manipulation of the argument Username can lead to cross site scripting. The attack may be launched...

Saad Irfan RemoteClinic 安全漏洞

Saad Irfan RemoteClinic is an open source application from Saad Irfan. Provides the ability to remotely manage your clinic via the web. A security vulnerability exists in Saad Irfan RemoteClinic 2.0 and earlier versions, which stems from cross-site scripting due to incorrect manipulation of the...

expressCart 安全漏洞

expressCart is a shopping cart software by Mark Moffat Individual Developer. A security vulnerability exists in expressCart that stems from an injection attack due to a misuse of the file /admin/product/edit/...

PT-2025-35474

Name of the Vulnerable Software and Affected Versions: RemoteClinic versions up to 2.0 Description: A vulnerability exists in RemoteClinic that affects the processing of the file /patients/edit-patient.php. Manipulation of the Email argument leads to information disclosure. The attack can be...

PT-2025-35473

Name of the Vulnerable Software and Affected Versions: RemoteClinic versions up to 2.0 Description: A flaw has been found in RemoteClinic that affects unknown code within the /staff/edit.php file. Manipulation of the Last Name argument can lead to cross-site scripting. The attack can be launched...

Saad Irfan RemoteClinic 安全漏洞

Saad Irfan RemoteClinic is an open source application from Saad Irfan. Provides the ability to remotely manage your clinic via the web. A security vulnerability exists in Saad Irfan RemoteClinic 2.0 and earlier versions, which stems from an incorrect manipulation of the parameter image in the fil...

CampCodes Online Hospital Management System 安全漏洞

CampCodes Online Hospital Management System is an online hospital management system from CampCodes, Inc. A security vulnerability exists in CampCodes Online Hospital Management System version 1.0, which results from cross-site scripting due to incorrect manipulation of the parameter Username in t...

PT-2025-35475

Name of the Vulnerable Software and Affected Versions: RemoteClinic versions up to 2.0 Description: A vulnerability exists in RemoteClinic that allows for unrestricted file upload. The issue is located in the /staff/edit-my-profile.php file, impacting an unknown function. The image argument can b...

PT-2025-35513

Name of the Vulnerable Software and Affected Versions: expressCart versions prior to b31302f4e99c3293bd742c6d076a721e168118b0 Description: A vulnerability exists in the Edit Product Page component of expressCart. The issue involves an injection flaw within an unknown function of the...

PT-2025-35435

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hospital Management System version 1.0 Description: A flaw has been found that allows for cross-site scripting XSS. The issue is located in an unknown function within the /edit-profile.php file of the Edit Profile Page...

Saad Irfan RemoteClinic 安全漏洞

Saad Irfan RemoteClinic is an open source application from Saad Irfan. Provides the ability to remotely manage your clinic via the web. A security vulnerability exists in Saad Irfan RemoteClinic 2.0 and earlier versions, which stems from information disclosure due to incorrect manipulation of the...

CVE-2025-9746

A vulnerability was detected in Campcodes Hospital Management System 1.0. This affects an unknown function of the file /admin/edit-doctor-specialization.php of the component Edit Doctor Specialization Page. The manipulation results in cross site scripting. The attack may be launched remotely. The...

CVE-2025-9746

A vulnerability was detected in Campcodes Hospital Management System 1.0. This affects an unknown function of the file /admin/edit-doctor-specialization.php of the component Edit Doctor Specialization Page. The manipulation results in cross site scripting. The attack may be launched remotely. The...