Vendors / HashenUdara Records 10 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 2
Exploited now HashenUdara records in CISA KEV No HashenUdara vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointment.php.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00438 · Published 2025-12-02 · No fix listed CWE-89
Priority HIGH 73
edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add-session.php via the "title" parameter.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00564 · Published 2025-12-11 · No fix listed CWE-20
Priority HIGH 70
A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to cc258425b915d1af9e298777ccd26d160493e68d.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00254 · Published 2026-10-26 · No fix listed CWE-74
Priority MEDIUM 44
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/settings.php.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01215 · Published 2022-08-26 · No fix listed CWE-89
Priority MEDIUM 44
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/booking.php.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01215 · Published 2022-08-26 · No fix listed CWE-89
Priority MEDIUM 44
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/doctors.php.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01215 · Published 2022-08-26 · No fix listed CWE-89
Priority LOW 39
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a Cross-Site Request Forgery (CSRF) via /patient/settings.php.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00513 · Published 2022-08-26 · No fix listed CWE-352
Priority LOW 30
An access control issue in the component /ip/admin/ of Edoc-doctor-appointment-system v1.0.1 allows attackers to arbitrarily edit, read, and delete Administrator data.
CVSS 3.1 MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.0077 · Published 2022-08-26 · No fix listed
Priority LOW 28
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability at /patient/index.php.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00675 · Published 2022-08-26 · No fix listed CWE-79
Priority LOW 25
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability at /patient/settings.php.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00624 · Published 2022-08-26 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
4 2 4 0 0
THREATIST.IORead the docs