Lucene search
K

16072 matches found

NVD
NVD
added 2025/05/17 5:15 a.m.16 views

CVE-2025-4818

A vulnerability was found in SourceCodester Doctor's Appointment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/delete-doctor.php of the component GET Parameter Handler. The manipulation of the argument ID leads to sql injection. The attac...

9.8CVSS0.00421EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/05/17 5:0 a.m.23 views

CVE-2025-4818 SourceCodester Doctor's Appointment System GET Parameter delete-doctor.php sql injection

A vulnerability was found in SourceCodester Doctor's Appointment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/delete-doctor.php of the component GET Parameter Handler. The manipulation of the argument ID leads to sql injection. The attac...

7.5CVSS0.00421EPSS
Exploits1References5
CVE
CVE
added 2025/05/17 5:0 a.m.36 views

CVE-2025-4818

The CVE-2025-4818 entry affects SourceCodester Doctor’s Appointment System 1.0. A vulnerability exists in the GET Parameter Handler for /admin/delete-doctor.php where manipulating the ID argument leads to SQL injection. Exploitation is described as remote, with exploits disclosed publicly. Multip...

9.8CVSS7.5AI score0.00421EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2025/05/17 4:16 a.m.11 views

CVE-2025-4817

A vulnerability was found in Sourcecodester Doctor's Appointment System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/delete-appointment.php of the component GET Parameter Handler. The manipulation of the argument ID leads to sql injection. The...

9.8CVSS0.00421EPSS
Exploits1References5
NVD
NVD
added 2025/05/17 4:16 a.m.10 views

CVE-2025-4816

A vulnerability was found in SourceCodester Doctor's Appointment System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/appointment.php of the component GET Parameter Handler. The manipulation of the argument ID leads to sql injection. It is possible to...

9.8CVSS0.00421EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/05/17 4:0 a.m.7 views

CVE-2025-4817 Sourcecodester Doctor's Appointment System GET Parameter delete-appointment.php sql injection

A vulnerability was found in Sourcecodester Doctor's Appointment System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/delete-appointment.php of the component GET Parameter Handler. The manipulation of the argument ID leads to sql injection. The...

7.5CVSS7.5AI score0.00421EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/05/17 4:0 a.m.17 views

CVE-2025-4817 Sourcecodester Doctor's Appointment System GET Parameter delete-appointment.php sql injection

A vulnerability was found in Sourcecodester Doctor's Appointment System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/delete-appointment.php of the component GET Parameter Handler. The manipulation of the argument ID leads to sql injection. The...

7.5CVSS0.00421EPSS
Exploits1References5
CVE
CVE
added 2025/05/17 4:0 a.m.30 views

CVE-2025-4817

The CVE-2025-4817 entry concerns Sourcecodester Doctor's Appointment System 1.0, where the vulnerability affects the code path handling the GET parameter in /admin/delete-appointment.php. The root cause is improper handling/manipulation of the ID parameter, enabling SQL injection. Impact is high/...

9.8CVSS7.5AI score0.00421EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/17 3:0 a.m.10 views

CVE-2025-4816 SourceCodester Doctor's Appointment System GET Parameter appointment.php sql injection

A vulnerability was found in SourceCodester Doctor's Appointment System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/appointment.php of the component GET Parameter Handler. The manipulation of the argument ID leads to sql injection. It is possible to...

7.5CVSS7.5AI score0.00421EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/05/17 3:0 a.m.15 views

CVE-2025-4816 SourceCodester Doctor's Appointment System GET Parameter appointment.php sql injection

A vulnerability was found in SourceCodester Doctor's Appointment System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/appointment.php of the component GET Parameter Handler. The manipulation of the argument ID leads to sql injection. It is possible to...

7.5CVSS0.00421EPSS
Exploits1References5
CVE
CVE
added 2025/05/17 3:0 a.m.37 views

CVE-2025-4816

CVE-2025-4816 concerns SourceCodester Doctor’s Appointment System 1.0, where the GET parameter handler for the file /admin/appointment.php has an improper handling of the ID parameter, enabling SQL injection. Multiple connected records state that manipulating the ID can be exploited remotely and ...

9.8CVSS7.5AI score0.00421EPSS
Exploits1References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/17 12:18 a.m.13 views

CVE-2025-44185

SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Request Forgery CSRF in /admin/changepass.php via the password parameter...

5.4CVSS7.2AI score0.00178EPSS
Exploits2References1
CNNVD
CNNVD
added 2025/05/17 12:0 a.m.1 views

SourceCodester Doctors Appointment System 注入漏洞

SourceCodester Doctors Appointment System is SourceCodester open source a doctor appointment system. An injection vulnerability exists in SourceCodester Doctors Appointment System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file...

9.8CVSS7.8AI score0.00421EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2025/05/17 12:0 a.m.3 views

PT-2025-21774 · Sourcecodester · Sourcecodester Doctors Appointment System

Name of the Vulnerable Software and Affected Versions: SourceCodester Doctor's Appointment System version 1.0 Description: A critical issue affects the processing of the file /admin/delete-doctor.php, specifically the GET Parameter Handler component. The manipulation of the ID argument leads to S...

9.8CVSS7.5AI score0.00421EPSS
Exploits1References13
Positive Technologies
Positive Technologies
added 2025/05/17 12:0 a.m.4 views

PT-2025-21770 · Sourcecodester · Sourcecodester Doctors Appointment System

Name of the Vulnerable Software and Affected Versions: SourceCodester Doctor's Appointment System version 1.0 Description: A critical issue affects an unknown part of the file /admin/appointment.php of the component GET Parameter Handler. The manipulation of the ID argument leads to SQL injection...

9.8CVSS7.6AI score0.00421EPSS
Exploits1References13
Positive Technologies
Positive Technologies
added 2025/05/17 12:0 a.m.3 views

PT-2025-21773 · Sourcecodester · Sourcecodester Doctors Appointment System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Doctor's Appointment System version 1.0 Description: A critical vulnerability was found in the Sourcecodester Doctor's Appointment System. This issue affects the unknown code of the file /admin/delete-appointment.php of the...

9.8CVSS7.5AI score0.00421EPSS
Exploits1References12
NVD
NVD
added 2025/05/16 8:15 p.m.11 views

CVE-2025-4807

A vulnerability, which was classified as problematic, was found in SourceCodester Online Student Clearance System 1.0. This affects an unknown part. The manipulation leads to exposure of information through directory listing. It is possible to initiate the attack remotely. The exploit has been...

7.5CVSS0.00932EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/05/16 7:31 p.m.7 views

CVE-2025-4807 SourceCodester Online Student Clearance System exposure of information through directory listing

A vulnerability, which was classified as problematic, was found in SourceCodester Online Student Clearance System 1.0. This affects an unknown part. The manipulation leads to exposure of information through directory listing. It is possible to initiate the attack remotely. The exploit has been...

6.9CVSS6.9AI score0.00932EPSS
Exploits1References5
OSV
OSV
added 2025/05/16 7:15 p.m.3 views

CVE-2025-4806

A vulnerability, which was classified as critical, has been found in SourceCodester/oretnom23 Stock Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/?page=backorder/viewbo. The manipulation of the argument ID leads to sql injection. The attack may be...

8.8CVSS5.8AI score0.00389EPSS
Exploits1References4
NVD
NVD
added 2025/05/16 7:15 p.m.12 views

CVE-2025-4806

A vulnerability, which was classified as critical, has been found in SourceCodester/oretnom23 Stock Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/?page=backorder/viewbo. The manipulation of the argument ID leads to sql injection. The attack may be...

8.8CVSS0.00389EPSS
Exploits1References4
Rows per page
Query Builder