Lucene search
K

48 matches found

CVE
CVE
added 2023/10/10 4:31 p.m.54 views

CVE-2023-5495

CVE-2023-5495 affects QDocs Smart School 6.4.1. The vulnerability is a SQL injection in the HTTP POST Request Handler, triggered by manipulating the POST parameters searchdata[0][title], searchdata[0][searchfield], and searchdata[0][searchvalue] sent to /course/filterRecords/. Root cause: input d...

9.8CVSS8.2AI score0.0106EPSS
Exploits4References3Affected Software1
CNNVD
CNNVD
added 2023/10/10 12:0 a.m.3 views

QDocs Smart School SQL Injection Vulnerability

QDocs Smart School is a Smart School application from QDocs, Inc. QDocs Smart School version 6.4.1 has a SQL injection vulnerability that originates from the parameter searchdata0title/searchdata0searchfield/searchdata0 searchvalue can cause sql injection...

9.8CVSS8.4AI score0.0106EPSS
Exploits4References5
OSV
OSV
added 2021/01/26 6:15 p.m.2 views

CVE-2020-36011

A cross-site scripting XSS issue in Add Patient Form in QDOCS Smart Hospital Management System 3.1 allows a remote attacker to inject arbitrary code via the Name, Guardian Name, Email, Address, Remarks, or Any Known Allergies field...

4.8CVSS6AI score0.00705EPSS
Exploits1References2
NVD
NVD
added 2021/01/26 6:15 p.m.9 views

CVE-2020-36011

A cross-site scripting XSS issue in Add Patient Form in QDOCS Smart Hospital Management System 3.1 allows a remote attacker to inject arbitrary code via the Name, Guardian Name, Email, Address, Remarks, or Any Known Allergies field...

4.8CVSS5.1AI score0.00705EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2021/01/26 6:15 p.m.2 views

CVE-2020-36011

A cross-site scripting XSS issue in Add Patient Form in QDOCS Smart Hospital Management System 3.1 allows a remote attacker to inject arbitrary code via the Name, Guardian Name, Email, Address, Remarks, or Any Known Allergies field...

4.8CVSS5.5AI score0.00705EPSS
Exploits1References3
Prion
Prion
added 2021/01/26 6:15 p.m.13 views

Cross site scripting

A cross-site scripting XSS issue in Add Patient Form in QDOCS Smart Hospital Management System 3.1 allows a remote attacker to inject arbitrary code via the Name, Guardian Name, Email, Address, Remarks, or Any Known Allergies field...

3.5CVSS5.1AI score0.00705EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2021/01/26 6:53 a.m.51 views

CVE-2020-36011

CVE-2020-36011 : XSS in Add Patient Form of QDOCS Smart Hospital Management System 3.1. A remote attacker can inject arbitrary code via Name, Guardian Name, Email, Address, Remarks, or Any Known Allergies fields. Documents confirm the affected product and the vulnerability type but do not provide...

4.8CVSS5AI score0.00705EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2021/01/26 12:0 a.m.4 views

QDOCS Smart Hospital Management System Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in QDOCS Smart Hospital Management System version 3.1. An attacker could exploit this vulnerability to steal sensitive information...

4.8CVSS5.7AI score0.00705EPSS
Exploits1References3
Rows per page
Query Builder