CVE-2022-37152

An issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection vulnerability via "dob" parameter in "/classes/Users.php?f=saveclient"...

CVE-2022-37152

An issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection vulnerability via "dob" parameter in "/classes/Users.php?f=saveclient"...

CVE-2022-37152

An issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection vulnerability via "dob" parameter in "/classes/Users.php?f=saveclient"...

Cross site scripting

An issue was discovered in Online Diagnostic Lab Management System 1.0. There is a stored XSS vulnerability via firstname, address, middlename, lastname , gender, email, contact parameters...

Sql injection

An issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection vulnerability via "dob" parameter in "/classes/Users.php?f=saveclient"...

Design/Logic Flaw

There is an unauthorized access vulnerability in Online Diagnostic Lab Management System 1.0...

CVE-2022-37151

There is an unauthorized access vulnerability in Online Diagnostic Lab Management System 1.0...

CVE-2022-37151

Technical details about CVE-2022-37151 are not provided in the connected documents. Monitor for updates from vendor advisories and security bulletins to obtain affected components, impact, and remediation.

CVE-2022-37152

CVE-2022-37152 affects Online Diagnostic Lab Management System 1.0. The issue is a SQL injection via the dob parameter in /classes/Users.php?f=save_client, with CVSS 3.1 base score 9.8 (CRITICAL) affecting confidentiality, integrity, and availability. The provided documents do not specify root-ca...

CVE-2022-37152

An issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection vulnerability via "dob" parameter in "/classes/Users.php?f=saveclient"...

CVE-2022-37150

An issue was discovered in Online Diagnostic Lab Management System 1.0. There is a stored XSS vulnerability via firstname, address, middlename, lastname , gender, email, contact parameters...

CVE-2022-37150

An XSS vulnerability (stored) affects Online Diagnostic Lab Management System 1.0 (CVE-2022-37150). The issue is triggered via user-input fields including firstname, address, middlename, lastname, gender, email, and contact, indicating improper sanitization of inputs stored and later reflected. T...

Online Diagnostic Lab Management System SQL注入漏洞

Online Diagnostic Lab Management System is an online diagnostic lab management system. A SQL injection vulnerability exists in Online Diagnostic Lab Management System version 1.0, which originates from a SQL injection vulnerability via the dob parameter in /classes/Users.php?f=saveclient...

Online Diagnostic Lab Management System 安全漏洞

Online Diagnostic Lab Management System is an online diagnostic lab management system. A security vulnerability exists in Online Diagnostic Lab Management System version 1.0, which originates from the presence of unauthorized access...

Online Diagnostic Lab Management System 跨站脚本漏洞

Online Diagnostic Lab Management System is an online diagnostic lab management system. A cross-site scripting vulnerability exists in Online Diagnostic Lab Management System version 1.0, which originates from an XSS via the firstname, address, middlename, lastname , gender, email, contact...

GitHub Security Lab: [JAVA]: Partial Path Traversal

This bug was reported directly to GitHub Security Lab...

CVE-2021-32862

The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting XSS vulnerabilities if the...

CVE-2021-32862

The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting XSS vulnerabilities if the...

Cross site scripting

The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting XSS vulnerabilities if the...

CVE-2021-32862

The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting XSS vulnerabilities if the...