Vulnerabilities

TI-2022-16592 CVE-2022-36201 · GHSA-238v-qhq7-h88m

Doctor’s Appointment System v1.0 is vulnerable to Blind SQLi via settings.php.

MEDIUM 47

Doctor’s Appointment System v1.0 is vulnerable to Blind SQLi via settings.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02398 Published 2022-08-31 No fix listed CWE-89

TI-2022-16593 CVE-2022-36202 · GHSA-m6pw-38q3-7wrw

MEDIUM 44

Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00913 Published 2022-08-31 No fix listed CWE-639

TI-2022-16594 CVE-2022-36203 · GHSA-r64g-q6gj-fmfr

LOW 29

Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting (XSS) via the admin panel.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01046 Published 2022-08-31 No fix listed CWE-79