Hashenudara

9 CVEs across 1 Hashenudara products. Browse Hashenudara vulnerabilities, severities, and proof-of-concept exploits.

Hashenudara products with known CVEs

ProductCVEs
Edoc-Doctor-Appointment-System9
Hashenudara CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-66918High8.82025-12-11edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add-session.php via the "title" parameter.
CVE-2025-65358Critical9.82025-12-02Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointment.php.
CVE-2022-36548Medium5.42022-08-26Edoc-doctor-appointment-system v1.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability at /patient/settings.php. This vulnerability…
CVE-2022-36547Medium6.12022-08-26Edoc-doctor-appointment-system v1.0.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability at /patient/index.php. This vulnerability…
CVE-2022-36546High8.82022-08-26Edoc-doctor-appointment-system v1.0.1 was discovered to contain a Cross-Site Request Forgery (CSRF) via /patient/settings.php.
CVE-2022-36545Critical9.82022-08-26Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/settings.php.
CVE-2022-36544Critical9.82022-08-26Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/booking.php.
CVE-2022-36543Critical9.82022-08-26Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/doctors.php.
CVE-2022-36542Medium6.52022-08-26An access control issue in the component /ip/admin/ of Edoc-doctor-appointment-system v1.0.1 allows attackers to arbitrarily edit, read, and delete Administrat…