exploitDog

CVE-2022-36201

Опубликовано: 31 авг. 2022

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

Doctor’s Appointment System v1.0 is vulnerable to Blind SQLi via settings.php.

Ссылки

http://packetstormsecurity.com/files/168212/Doctors-Appointment-System-1.0-SQL-Injection.html
Exploit
Third Party Advisory
VDB Entry
https://github.com/aznull/CVEs
Third Party Advisory
https://www.sourcecodester.com/hashenudara/simple-doctors-appointment-project.html
Product
http://packetstormsecurity.com/files/168212/Doctors-Appointment-System-1.0-SQL-Injection.html
Exploit
Third Party Advisory
VDB Entry
https://github.com/aznull/CVEs
Third Party Advisory
https://www.sourcecodester.com/hashenudara/simple-doctors-appointment-project.html
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:doctor\'s_appointment_system_project:doctor\'s_appointment_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 43%

0.00204

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-238v-qhq7-h88m

CVSS3: 9.8

github

почти 3 года назад

Doctor's Appointment System 1.0 is vulnerable to SQL Injection via booking.php has ?id=.

EPSS

Процентиль: 43%

0.00204

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89