Priority HIGH 82
Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload functionality in users.php
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.28011 · Published 2022-10-31 · No fix listed CWE-434
Priority HIGH 71
A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03367 · Published 2022-07-12 · No fix listed CWE-434
Priority HIGH 70
A vulnerability was found in SourceCodesters Clinics Patient Management System 2.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00652 · Published 2024-09-07 · No fix listed CWE-89
Priority HIGH 70
A vulnerability was found in SourceCodester Clinics Patient Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00884 · Published 2024-08-14 · No fix listed CWE-425
Priority MEDIUM 64
A vulnerability was found in SourceCodester Clinics Patient Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00388 · Published 2024-08-09 · No fix listed CWE-352
Priority MEDIUM 57
A vulnerability has been found in SourceCodester Clinics Patient Management System 1.0 and classified as critical.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00614 · Published 2024-08-19 · No fix listed CWE-89
Priority MEDIUM 57
A vulnerability classified as critical was found in SourceCodester Clinics Patient Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00452 · Published 2024-08-15 · No fix listed CWE-89
Priority MEDIUM 57
A vulnerability was found in SourceCodester Clinics Patient Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00508 · Published 2024-08-13 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was found in SourceCodester Clinics Patient Management System 1.0 and classified as critical.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00537 · Published 2024-08-13 · No fix listed CWE-89
Priority MEDIUM 57
A vulnerability has been found in SourceCodester Clinics Patient Management System 1.0 and classified as critical.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00477 · Published 2024-08-13 · No fix listed CWE-89
Priority MEDIUM 57
A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00551 · Published 2024-08-05 · No fix listed CWE-89
Priority MEDIUM 57
A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00534 · Published 2024-08-04 · No fix listed CWE-89
Priority MEDIUM 57
A vulnerability was found in SourceCodester Clinics Patient Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00401 · Published 2024-07-22 · No fix listed CWE-89
Priority MEDIUM 57
A vulnerability was found in SourceCodester Clinics Patient Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00417 · Published 2024-07-22 · No fix listed CWE-89
Priority MEDIUM 50
A vulnerability has been found in SourceCodester Clinics Patient Management System 2.0 and classified as critical.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00961 · Published 2022-07-12 · No fix listed CWE-89
Priority MEDIUM 49
A vulnerability classified as critical was found in SourceCodester Clinics Patient Management System.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00781 · Published 2022-09-05 · No fix listed CWE-89
Priority MEDIUM 45
Clinic's Patient Management System v1.0 has arbitrary code execution via url: ip/pms/users.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0144 · Published 2022-08-10 · No fix listed
Priority MEDIUM 44
Clinic's Patient Management System v1.0 is vulnerable to SQL injection via /pms/update_user.php?id=.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01001 · Published 2022-08-10 · No fix listed CWE-89
Priority MEDIUM 44
Clinic's Patient Management System v1.0 is vulnerable to SQL Injection via /pms/update_medicine.php?id=.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0092 · Published 2022-08-16 · No fix listed CWE-89
Priority MEDIUM 43
Clinic's Patient Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pms/update_patient.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00761 · Published 2022-09-02 · No fix listed CWE-89
Priority MEDIUM 43
A vulnerability was found in SourceCodester Clinics Patient Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00775 · Published 2022-09-05 · No fix listed CWE-89
Priority LOW 39
A vulnerability was found in SourceCodester Clinics Patient Management System 1.0.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.007 · Published 2023-02-25 · No fix listed CWE-89
Priority LOW 31
A vulnerability was found in SourceCodester Clinics Patient Management System 2.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00636 · Published 2024-09-07 · No fix listed CWE-601
Priority LOW 28
Clinic's Patient Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via patients.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00614 · Published 2022-08-22 · No fix listed CWE-79
Priority LOW 25
A vulnerability was found in SourceCodester Clinics Patient Management System 2.0 and classified as problematic.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00489 · Published 2024-09-07 · No fix listed CWE-79
Load more
THREATIST.IORead the docs