|
211581
|
6.1 |
MEDIUM
Network
|
enhancesoft
|
osticket
|
Cross Site Scripting (XSS) vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter in include/class.queue.php.
|
CWE-79
Cross-site Scripting
|
CVE-2020-22609
|
2024-11-21 14:13 |
2021-06-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211582
|
6.1 |
MEDIUM
Network
|
enhancesoft
|
osticket
|
Cross Site Scripting vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter to include/ajax.search.php.
|
CWE-79
Cross-site Scripting
|
CVE-2020-22608
|
2024-11-21 14:13 |
2021-06-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211583
|
6.1 |
MEDIUM
Network
|
limesurvey
|
limesurvey
|
Cross Site Scripting vulnerabilty in LimeSurvey 4.1.11+200316 via the (1) name and (2) description parameters in application/controllers/admin/PermissiontemplatesController.php.
|
CWE-79
Cross-site Scripting
|
CVE-2020-22607
|
2024-11-21 14:13 |
2021-06-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211584
|
7.5 |
HIGH
Network
|
phpgurukul
|
hospital_management_system
|
PHPGurukul Hospital Management System in PHP v4.0 has a sensitive information disclosure vulnerability in multiple areas. Remote unauthenticated users can exploit the vulnerability to obtain user sen…
|
CWE-287 CWE-862
Improper Authentication Missing Authorization
|
CVE-2020-22176
|
2024-11-21 14:13 |
2021-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211585
|
7.5 |
HIGH
Network
|
phpgurukul
|
hospital_management_system
|
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\admin\betweendates-detailsreports.php. Remote unauthenticated users can exploit the vulnerability to obtain…
|
CWE-89
SQL Injection
|
CVE-2020-22175
|
2024-11-21 14:13 |
2021-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211586
|
7.5 |
HIGH
Network
|
phpgurukul
|
hospital_management_system
|
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\book-appointment.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensiti…
|
CWE-89
SQL Injection
|
CVE-2020-22174
|
2024-11-21 14:13 |
2021-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211587
|
7.5 |
HIGH
Network
|
phpgurukul
|
hospital_management_system
|
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\edit-profile.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive i…
|
CWE-89
SQL Injection
|
CVE-2020-22173
|
2024-11-21 14:13 |
2021-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211588
|
7.5 |
HIGH
Network
|
phpgurukul
|
hospital_management_system
|
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\get_doctor.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive inf…
|
CWE-89
SQL Injection
|
CVE-2020-22172
|
2024-11-21 14:13 |
2021-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211589
|
7.5 |
HIGH
Network
|
phpgurukul
|
hospital_management_system
|
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\registration.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive i…
|
CWE-89
SQL Injection
|
CVE-2020-22171
|
2024-11-21 14:13 |
2021-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211590
|
7.5 |
HIGH
Network
|
phpgurukul
|
hospital_management_system
|
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\get_doctor.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive inf…
|
CWE-89
SQL Injection
|
CVE-2020-22170
|
2024-11-21 14:13 |
2021-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|