Vendors / Online Health Care System Project Online Health Care System Project Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Online Health Care System Project records in CISA KEV No Online Health Care System Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
Online Health Care System v1.0 was discovered to contain a SQL injection vulnerability via the consulting_id parameter at /healthcare/Admin/consulting_detail.php.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00841 · Published 2023-01-13 · No fix listed CWE-89
Priority MEDIUM 57
A vulnerability classified as critical has been found in SourceCodester Online Health Care System 1.0.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0062 · Published 2024-08-22 · No fix listed CWE-89
Priority MEDIUM 47
SourceCodester Online Health Care System 1.0 is affected by SQL Injection which allows a potential attacker to bypass the authentication system and become an admin.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02339 · Published 2020-12-23 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
Critical2 High0 Medium1 Low0 No CVSS0