CVE-2022-43163 | High | 7.2 | 2022-11-17 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /clients/view_client.php. |
CVE-2022-43162 | High | 7.2 | 2022-11-17 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/view_test.php. |
CVE-2022-43135 | Critical | 9.8 | 2022-11-16 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php. |
CVE-2022-43058 | Critical | 9.8 | 2022-11-09 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms//classes/Master.php?f=delet… |
CVE-2022-43052 | High | 7.2 | 2022-11-07 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Users.php?f=delete. |
CVE-2022-43051 | High | 7.2 | 2022-11-07 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Users.php?f=delete_… |
CVE-2022-43063 | High | 7.2 | 2022-11-03 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Users.php?f=delete_client. |
CVE-2022-43062 | High | 7.2 | 2022-11-03 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_appoi… |
CVE-2022-43068 | High | 7.2 | 2022-11-02 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_reser… |
CVE-2022-43066 | High | 7.2 | 2022-11-02 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Master.php?f=delete… |
CVE-2022-43227 | High | 7.2 | 2022-11-02 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/admin/?page=appointments/vi… |
CVE-2022-43226 | High | 8.8 | 2022-11-02 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/?page=appointments/view_app… |
CVE-2022-43127 | High | 7.2 | 2022-11-01 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/update_status.php. |
CVE-2022-43126 | High | 7.2 | 2022-11-01 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/tests/manage_test.php. |
CVE-2022-43125 | High | 7.2 | 2022-11-01 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/manage_appointment.p… |
CVE-2022-43124 | High | 7.2 | 2022-11-01 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manage_user. |
CVE-2022-42064 | Critical | 9.8 | 2022-10-14 | Online Diagnostic Lab Management System version 1.0 remote exploit that bypasses login with SQL injection and then uploads a shell. |
CVE-2022-41534 | High | 7.2 | 2022-10-13 | Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /php_action/createOrder.php. Th… |
CVE-2022-41533 | High | 7.2 | 2022-10-13 | Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /php_action/editProductImage.ph… |
CVE-2022-42074 | High | 7.2 | 2022-10-07 | Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editcategory.php?id=. |
CVE-2022-42073 | High | 7.2 | 2022-10-07 | Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editclient.php?id=. |
CVE-2022-41513 | High | 7.2 | 2022-10-07 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /diagnostic/edittest.php. |
CVE-2022-41512 | High | 7.2 | 2022-10-07 | An arbitrary file upload vulnerability in the component /php_action/editFile.php of Online Diagnostic Lab Management System v1.0 allows attackers to execute ar… |
CVE-2022-37152 | Critical | 9.8 | 2022-08-26 | An issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection vulnerability via "dob" parameter in "/classes/Users.php?f=sav… |
CVE-2022-37151 | High | 7.5 | 2022-08-26 | There is an unauthorized access vulnerability in Online Diagnostic Lab Management System 1.0. |
CVE-2022-37150 | Medium | 5.4 | 2022-08-26 | An issue was discovered in Online Diagnostic Lab Management System 1.0. There is a stored XSS vulnerability via firstname, address, middlename, lastname , gend… |