Hashenudara Edoc-doctor-appointment-system vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Hashenudara Edoc-doctor-appointment-system: 2 record(s), with affected versions and fixes.cpe:2.3:a:hashenudara:edoc-doctor-appointment-system
CVE-2025-66918
High · 8.8
CWE-20 Dec 11, 2025
edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add...
edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add-session.php via the "title" parameter.
CVE-2025-65358
Critical · 9.8
CWE-89 Dec 2, 2025
SQL Injection in Hashenudara Edoc-doctor-appointment-system
Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointment.php.