Show filters
43 Total Results
Displaying 11-20 of 43
Sort by:
Attacker Value
Unknown
CVE-2023-1057
Disclosure Date: February 27, 2023 (last updated October 08, 2023)
A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been rated as critical. Affected by this issue is the function edoc of the file login.php. The manipulation of the argument usermail leads to sql injection. VDB-221822 is the identifier assigned to this vulnerability.
0
Attacker Value
Unknown
CVE-2023-1056
Disclosure Date: February 27, 2023 (last updated October 08, 2023)
A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /edoc/doctor/patient.php. The manipulation of the argument search12 leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221821 was assigned to this vulnerability.
0
Attacker Value
Unknown
CVE-2020-29168
Disclosure Date: February 17, 2023 (last updated October 08, 2023)
SQL Injection vulnerability in Projectworlds Online Doctor Appointment Booking System, allows attackers to gain sensitive information via the q parameter to the getuser.php endpoint.
0
Attacker Value
Unknown
CVE-2022-36203
Disclosure Date: August 31, 2022 (last updated October 08, 2023)
Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting (XSS) via the admin panel. In addition, it leads to takeover the administrator account by stealing the cookie via XSS.
0
Attacker Value
Unknown
CVE-2022-36202
Disclosure Date: August 31, 2022 (last updated October 08, 2023)
Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php. The settings.php is affected by Broken Access Control (IDOR) via id= parameter.
0
Attacker Value
Unknown
CVE-2022-36201
Disclosure Date: August 31, 2022 (last updated October 08, 2023)
Doctor’s Appointment System v1.0 is vulnerable to Blind SQLi via settings.php.
0
Attacker Value
Unknown
CVE-2022-36548
Disclosure Date: August 26, 2022 (last updated October 08, 2023)
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability at /patient/settings.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name text field.
0
Attacker Value
Unknown
CVE-2022-36547
Disclosure Date: August 26, 2022 (last updated October 08, 2023)
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability at /patient/index.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search field.
0
Attacker Value
Unknown
CVE-2022-36546
Disclosure Date: August 26, 2022 (last updated October 08, 2023)
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a Cross-Site Request Forgery (CSRF) via /patient/settings.php.
0
Attacker Value
Unknown
CVE-2022-36545
Disclosure Date: August 26, 2022 (last updated October 08, 2023)
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/settings.php.
0
