Vulnerabilities

TI-2026-80245 CVE-2026-116112 · GHSA-r6h4-5497-c694

SQL injection in HashenUdara edoc-doctor-appointment-system

HIGH 70

A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to cc258425b915d1af9e298777ccd26d160493e68d.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00254 Published 2026-10-26 No fix listed CWE-74

TI-2025-41085 CVE-2025-66918 · GHSA-mx7c-8xq9-v34w

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in…

HIGH 73

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add-session.php via the "title" parameter.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00564 Published 2025-12-11 No fix listed CWE-20

TI-2025-40338 CVE-2025-65358 · GHSA-q3v5-x7gr-x8jr

Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection…

HIGH 82

Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointment.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00438 Published 2025-12-02 No fix listed CWE-89

TI-2022-16863 CVE-2022-36548 · GHSA-fr9x-3gv2-g88h

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a stored cross-site…

LOW 25

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability at /patient/settings.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2022-08-26 No fix listed CWE-79

TI-2022-16862 CVE-2022-36547 · GHSA-w6cp-44pj-29wv

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a reflected cross-site…

LOW 28

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability at /patient/index.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00675 Published 2022-08-26 No fix listed CWE-79

TI-2022-16861 CVE-2022-36546 · GHSA-jxhj-28xp-gw4j

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a Cross-Site Request…

LOW 39

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a Cross-Site Request Forgery (CSRF) via /patient/settings.php.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00513 Published 2022-08-26 No fix listed CWE-352

TI-2022-16860 CVE-2022-36545 · GHSA-q48j-mj2h-72qw

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection…

MEDIUM 44

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/settings.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01215 Published 2022-08-26 No fix listed CWE-89

TI-2022-16859 CVE-2022-36544 · GHSA-h3wx-94rw-9228

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection…

MEDIUM 44

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/booking.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01215 Published 2022-08-26 No fix listed CWE-89

TI-2022-16858 CVE-2022-36543 · GHSA-rpfp-2347-5q8p

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection…

MEDIUM 44

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/doctors.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01215 Published 2022-08-26 No fix listed CWE-89

TI-2022-16857 CVE-2022-36542 · GHSA-cp2g-2f5m-6hhj

An access control issue in the component /ip/admin/ of Edoc-doctor-appointment-system…

LOW 30

An access control issue in the component /ip/admin/ of Edoc-doctor-appointment-system v1.0.1 allows attackers to arbitrarily edit, read, and delete Administrator data.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.0077 Published 2022-08-26 No fix listed

Vulnerabilities

Filters