Skip to main content

Doctor S Appointment System

3 CVEs product

Monthly

CVE-2022-36203 MEDIUM POC This Month

Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting (XSS) via the admin panel. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Doctor S Appointment System
NVD GitHub
CVSS 3.1
6.1
EPSS
0.8%
CVE-2022-36202 CRITICAL Act Now

Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass PHP Doctor S Appointment System
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-36201 CRITICAL POC Act Now

Doctor’s Appointment System v1.0 is vulnerable to Blind SQLi via settings.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Doctor S Appointment System
NVD GitHub
CVSS 3.1
9.8
EPSS
1.8%
EPSS 1% CVSS 6.1
MEDIUM POC This Month

Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting (XSS) via the admin panel. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Doctor S Appointment System
NVD GitHub
EPSS 1% CVSS 9.8
CRITICAL Act Now

Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass PHP Doctor S Appointment System
NVD GitHub VulDB
EPSS 2% CVSS 9.8
CRITICAL POC Act Now

Doctor’s Appointment System v1.0 is vulnerable to Blind SQLi via settings.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Doctor S Appointment System
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy