Skip to main content

Doctor S Appointment System Project

3 CVEs vendor

Monthly

CVE-2022-36203 Aug 31, 21:15 MEDIUM POC This Month

Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting (XSS) via the admin panel. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Doctor S Appointment System Doctor S Appointment System Project
NVD GitHub
CVSS 3.1
6.1
EPSS
0.8%
CVE-2022-36202 Aug 31, 21:15 CRITICAL Act Now

Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Authentication Bypass Doctor S Appointment System Doctor S Appointment System Project
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-36201 Aug 31, 21:15 CRITICAL POC Act Now

Doctor’s Appointment System v1.0 is vulnerable to Blind SQLi via settings.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Doctor S Appointment System Doctor S Appointment System Project
NVD GitHub
CVSS 3.1
9.8
EPSS
1.8%
EPSS 1% CVSS 6.1
MEDIUM POC This Month

Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting (XSS) via the admin panel. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Doctor S Appointment System Doctor S Appointment System Project
NVD GitHub
EPSS 1% CVSS 9.8
CRITICAL Act Now

Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Authentication Bypass Doctor S Appointment System +1
NVD GitHub VulDB
EPSS 2% CVSS 9.8
CRITICAL POC Act Now

Doctor’s Appointment System v1.0 is vulnerable to Blind SQLi via settings.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Doctor S Appointment System +1
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy