Hashenudara vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Hashenudara products: 2 record(s), with severity, exploitation and fixes.

Edoc-doctor-appointment-system 2

Exploited only (KEV) →

CVE-2025-66918 High · 8.8 CWE-20 Dec 11, 2025

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add...

edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add-session.php via the "title" parameter.

CVE-2025-65358 Critical · 9.8 CWE-89 Dec 2, 2025

SQL Injection in Hashenudara Edoc-doctor-appointment-system

Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointment.php.