Doctor's Appointment System Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Doctor's Appointment System Project records in CISA KEV

No Doctor's Appointment System Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2022-16592 CVE-2022-36201 · GHSA-238v-qhq7-h88m

MEDIUM 47

Doctor’s Appointment System v1.0 is vulnerable to Blind SQLi via settings.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02398 Published 2022-08-31 No fix listed CWE-89

TI-2022-16593 CVE-2022-36202 · GHSA-m6pw-38q3-7wrw

MEDIUM 44

Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00913 Published 2022-08-31 No fix listed CWE-639

TI-2022-16594 CVE-2022-36203 · GHSA-r64g-q6gj-fmfr

LOW 29

Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting (XSS) via the admin panel.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01046 Published 2022-08-31 No fix listed CWE-79