Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
RemoteclinicRemote Clinic2.0

13 matches found

CVE
CVE•added 2021/04/13 12:15 a.m.•89 views

CVE-2021-30039

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Fever" or "Blood Pressure" field on the patients/register-report.php.

5.4CVSS5.3AI score0.00148EPSS
CVE
CVE•added 2021/04/13 12:15 a.m.•83 views

CVE-2021-30030

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the Full Name field on register-patient.php.

5.4CVSS5.3AI score0.00185EPSS
CVE
CVE•added 2021/04/13 12:15 a.m.•82 views

CVE-2021-30044

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php.

5.4CVSS5.3AI score0.00109EPSS
CVE
CVE•added 2021/04/13 12:15 a.m.•81 views

CVE-2021-30034

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the Symptons field on patients/register-report.php.

5.4CVSS5.3AI score0.00148EPSS
CVE
CVE•added 2021/04/13 12:15 a.m.•81 views

CVE-2021-30042

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Clinic Name", "Clinic Address", "Clinic City", or "Clinic Contact" field on clinics/register.php

5.4CVSS5.3AI score0.00148EPSS
CVE
CVE•added 2021/04/21 4:15 p.m.•53 views

CVE-2021-31329

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php

5.4CVSS5.4AI score0.0037EPSS
CVE
CVE•added 2023/11/07 3:15 p.m.•49 views

CVE-2023-33479

RemoteClinic version 2.0 contains a SQL injection vulnerability in the /staff/edit.php file.

9.8CVSS9.6AI score0.00352EPSS
CVE
CVE•added 2021/04/21 4:15 p.m.•42 views

CVE-2021-31327

Stored XSS in Remote Clinic v2.0 in /medicines due to Medicine Name Field.

5.4CVSS5.2AI score0.0037EPSS
CVE
CVE•added 2021/11/05 4:15 p.m.•32 views

CVE-2021-39416

Multiple Cross Site Scripting (XSS) vulnerabilities exists in Remote Clinic v2.0 in (1) patients/register-patient.php via the (a) Contact, (b) Email, (c) Weight, (d) Profession, (e) ref_contact, (f) address, (g) gender, (h) age, and (i) serial parameters; in (2) patients/edit-patient.php via the (a...

6.1CVSS6.2AI score0.00595EPSS
CVE
CVE•added 2023/11/07 3:15 p.m.•29 views

CVE-2023-33478

RemoteClinic 2.0 has a SQL injection vulnerability in the ID parameter of /medicines/stocks.php.

9.8CVSS9.7AI score0.00352EPSS
CVE
CVE•added 2023/01/20 7:15 p.m.•27 views

CVE-2022-48152

SQL Injection vulnerability in RemoteClinic 2.0 allows attackers to execute arbitrary commands and gain sensitive information via the id parameter to /medicines/profile.php.

9.8CVSS9.9AI score0.00069EPSS
CVE
CVE•added 2023/11/07 3:15 p.m.•25 views

CVE-2023-33480

RemoteClinic 2.0 contains a critical vulnerability chain that can be exploited by a remote attacker with low-privileged user credentials to create admin users, escalate privileges, and execute arbitrary code on the target system via a PHP shell. The vulnerabilities are caused by a lack of input val...

8.8CVSS9.1AI score0.05116EPSS
CVE
CVE•added 2023/11/07 3:15 p.m.•24 views

CVE-2023-33481

RemoteClinic 2.0 is vulnerable to a time-based blind SQL injection attack in the 'start' GET parameter of patients/index.php.

9.8CVSS9.7AI score0.00352EPSS