EUVD-2026-77681

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown part of the file doctorlogin.php. Executing a manipulation of the argument docmail/docpswd can lead to sql injection. The attack can be executed remotely...

CVE-2026-90805

A SQL injection vulnerability exists in the doctorlogin.php file of subhajitkhan online-clinic-management-system (a GitHub-hosted project). By manipulating the doc_mail and doc_pswd arguments, an unauthenticated remote attacker can inject SQL commands. The CVSS 3.1 score is 7.3 (High) with low im...

CVE-2026-90701

A vulnerability was detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The affected element is an unknown function of the file listdoctor.php. Performing a manipulation of the argument searchtext results in sql injection. The attack may be...

CVE-2026-90701 subhajitkhan online-clinic-management-system listdoctor.php sql injection

A vulnerability was detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The affected element is an unknown function of the file listdoctor.php. Performing a manipulation of the argument searchtext results in sql injection. The attack may be...

EUVD-2026-77342

A vulnerability was detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The affected element is an unknown function of the file listdoctor.php. Performing a manipulation of the argument searchtext results in sql injection. The attack may be...

CVE-2026-90701

CVE-2026-90701 is a SQL injection vulnerability in the subhajitkhan online-clinic-management-system project, specifically in the file listdoctor.php via manipulation of the searchtext argument. The vulnerability is exploitable remotely with no authentication required and low complexity. A proof-o...

CVE-2026-78246

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

EUVD-2024-38437

Malicious code in bioql PyPI...

EUVD-2023-58661

Malicious code in bioql PyPI...

itsourcecode Online Clinic Management System SQL注入漏洞

itsourcecode Online Clinic Management System is an online clinic management system of itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Clinic Management System, which stems from an incorrect manipulation of the parameter ID in the file...

CVE-2024-48597

Online Clinic Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /success/editp.php?action=edit...

CVE-2024-40393

Online Clinic Management System In PHP With Free Source code v1.0 was discovered to contain a SQL injection vulnerability via the user parameter at login.php...

PT-2024-33159 · Unknown · Online Clinic Management System

Name of the Vulnerable Software and Affected Versions: Online Clinic Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/success/editp.php?action=edit" API endpoint. Recommendations: Fo...

CVE-2024-48597

CVE-2024-48597 concerns Online Clinic Management System v1.0, where a SQL injection vulnerability is exploitable via the id parameter in the /success/editp.php?action=edit endpoint. The issue is caused by unsafely handling the id input, enabling potential unauthorized access or data tampering tha...

CVE-2024-48597

Online Clinic Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /success/editp.php?action=edit...

CVE-2024-40393

Online Clinic Management System In PHP With Free Source code v1.0 was discovered to contain a SQL injection vulnerability via the user parameter at login.php...

CVE-2023-6424

A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /clinic/diseasesymptomsview.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an...

CVE-2023-6423

A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /clinic/eventsview.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking user ...

CVE-2023-6422

A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /clinic/patientsview.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking use...

Design/Logic Flaw

A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /clinic/eventsview.php, in the FirstRecord parameter. Exploitation of this vulnerability could allow an attacking user ...