CVE-2023-6423: Improper Neutralization of Input During Web Page Generation

A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /clinic/eventsview.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking user ...

Sql injection

Multiple SQL injection vulnerabilities in AbleSpace 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 eid parameter to eventsview.php and the 2 id parameter to eventsclndrview.php...

CVE-2009-1316

CVE-2009-1316 affects AbleSpace 1.0 and involves SQL injection in web endpoints: events_view.php (parameter eid) and events_clndr_view.php (parameter id). Root cause is unsanitized user input leading to arbitrary SQL execution. Documented base score is 7.5 (HIGH) with network attack vector, low a...

CVE-2009-1316: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in AbleSpace 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 eid parameter to eventsview.php and the 2 id parameter to eventsclndrview.php...