Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: BigProf Component: Online Clinic Management System Clear all filters
TI-2023-05895 CVE-2023-6425 · GHSA-qqgr-7rvj-qrmx

Cross-site Scripting vulnerability in BigProf products

Priority LOW 28

A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /clinic/medical_records_view.php, in the F…

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00391 Published 2023-11-30 No fix listed CWE-79
TI-2023-05894 CVE-2023-6424 · GHSA-98w9-92x2-rrv2

Cross-site Scripting vulnerability in BigProf products

Priority LOW 28

A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /clinic/disease_symptoms_view.php, in the…

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00388 Published 2023-11-30 No fix listed CWE-79
TI-2023-05893 CVE-2023-6423 · GHSA-hjqr-c6q5-j324

Cross-site Scripting vulnerability in BigProf products

Priority LOW 28

A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /clinic/events_view.php, in the FirstRecor…

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00388 Published 2023-11-30 No fix listed CWE-79
TI-2023-05892 CVE-2023-6422 · GHSA-jwj8-vw62-cgqv

Cross-site Scripting vulnerability in BigProf products

Priority LOW 28

A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /clinic/patients_view.php, in the FirstRec…

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00388 Published 2023-11-30 No fix listed CWE-79