Vendors / PHPGurukul Records 1122 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 133
CVSS high 107
Exploited now PHPGurukul records in CISA KEV No PHPGurukul vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Records 12 records in Doctor Appointment Management System · all components
Priority HIGH 70
A vulnerability classified as critical was found in PHPGurukul Doctor Appointment Management System 1.0.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00502 · Published 2025-03-23 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was found in PHPGurukul Doctor Appointment Management System 1.0 and classified as critical.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00537 · Published 2025-03-23 · No fix listed CWE-74
Priority HIGH 70
A vulnerability, which was classified as critical, has been found in PHPGurukul Doctor Appointment Management System 1.0.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00544 · Published 2025-03-17 · No fix listed CWE-74
Priority HIGH 66
Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows attackers to execute a session hijacking attack.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00373 · Published 2025-07-28 · No fix listed CWE-20
Priority HIGH 66
In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript code into their profile name.
CVSS 3.1 HIGH 7.6· Network · No auth · User interaction · EPSS 0.00404 · Published 2025-09-03 · No fix listed CWE-79
Priority MEDIUM 58
Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00281 · Published 2024-10-30 · No fix listed CWE-79
Priority MEDIUM 58
A vulnerability classified as problematic was found in PHPGurukul Doctor Appointment Management System 1.0.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00635 · Published 2024-04-27 · No fix listed CWE-79
Priority MEDIUM 40
A vulnerability, which was classified as critical, has been found in PHPGurukul Doctor Appointment Management System 1.0.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00855 · Published 2024-04-27 · No fix listed CWE-99
Priority LOW 28
phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting (XSS) via searchdata=.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00452 · Published 2023-01-25 · No fix listed CWE-79
Priority LOW 28
A cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00532 · Published 2023-01-25 · No fix listed CWE-79
Priority LOW 28
A cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee ID parameter.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00502 · Published 2023-01-12 · No fix listed CWE-79
Priority LOW 28
Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00535 · Published 2023-01-12 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
133 107 877 5 0
THREATIST.IORead the docs