Vulnerabilidades do Hashenudara Edoc-doctor-appointment-system
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Hashenudara Edoc-doctor-appointment-system: 2 registro(s), com versões afetadas e correções.cpe:2.3:a:hashenudara:edoc-doctor-appointment-system
CVE-2025-66918
Alta · 8.8
CWE-20 11/12/2025
edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add...
edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add-session.php via the "title" parameter.
CVE-2025-65358
Crítica · 9.8
CWE-89 02/12/2025
SQL Injection em Hashenudara Edoc-doctor-appointment-system
Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointment.php.