Doctor Appointment System Project

10 CVEs across 1 Doctor Appointment System Project products. Browse Doctor Appointment System Project vulnerabilities, severities, and proof-of-concept exploits.

Doctor Appointment System Project products with known CVEs

ProductCVEs
Doctor Appointment System10
Doctor Appointment System Project CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-40945Critical9.82023-09-11Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php.
CVE-2023-39852Critical9.82023-08-15Doctormms v1.0 was discovered to contain a SQL injection vulnerability via the $userid parameter at myAppoinment.php. NOTE: this is disputed by a third party w…
CVE-2021-27320High7.52021-03-24Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname paramete…
CVE-2021-27319High7.52021-03-24Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via email parameter.
CVE-2021-27316High7.52021-03-24Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via lastname parameter.
CVE-2021-27315High7.52021-03-24Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parame…
CVE-2021-27314Critical9.82021-03-05SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login…
CVE-2021-27318Medium6.12021-03-01Cross Site Scripting (XSS) vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to inject arbitrary web script or HTML via t…
CVE-2021-27317Medium6.12021-03-01Cross Site Scripting (XSS) vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to inject arbitrary web script or HTML via t…
CVE-2021-27124Medium6.52021-02-18SQL injection in the expertise parameter in search_result.php in Doctor Appointment System v1.0 allows an authenticated patient user to dump the database crede…