GCVE - cpe:2.3:a:sourcecodester:doctors_appointment

Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:doctors_appointment_system:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Sourcecodester (`f6c988b2-f9bb-51b9-8f02-f23eef2a7551`)
Product	Doctors Appointment System (`cf6ed35d-5273-5742-ab8f-6608aae762a0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-4895`	vulnerable	2026-06-08 07:29:17.474208	SourceCodester Doctors Appointment System delete-session.php sql injection HIGH (7.3) A vulnerability, which was classified as critical, has been found in SourceCodester Doctors Appointment System 1.0. This issue affects some unknown processing of the file /admin/delete-session.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-05-18T20:31:05.404Z Updated: 2025-05-19T14:07:22.560Z Open on db.gcve.eu Reference links https://vuldb.com/?id.309449 https://vuldb.com/?ctiid.309449 https://vuldb.com/?submit.578022 https://github.com/Xiaoyi-ing/CVE/issues/11 https://www.sourcecodester.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-4219`	vulnerable	2026-06-08 06:16:11.824096	SourceCodester Doctors Appointment System login.php sql injection HIGH (7.3) A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument useremail leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-236365 was assigned to this vulnerability. Published: 2023-08-08T13:00:06.214Z Updated: 2024-08-02T07:17:12.162Z Open on db.gcve.eu Reference links https://vuldb.com/?id.236365 https://vuldb.com/?ctiid.236365 https://github.com/Yesec/-Doctor-s-Appointment-System/blob/main/SQL%20Injection%20in%20login.php/vuln.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1063`	vulnerable	2026-06-08 05:52:33.726311	SourceCodester Doctors Appointment System Parameter patient.php sql injection MEDIUM (6.3) A vulnerability has been found in SourceCodester Doctors Appointment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/patient.php of the component Parameter Handler. The manipulation of the argument search leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221827. Published: 2023-02-27T11:08:33.552Z Updated: 2024-08-02T05:32:46.345Z Open on db.gcve.eu Reference links https://vuldb.com/?id.221827 https://vuldb.com/?ctiid.221827 https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%20system%20vlun6.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1062`	vulnerable	2026-06-08 05:52:33.725870	SourceCodester Doctors Appointment System Parameter add-new.php sql injection MEDIUM (6.3) A vulnerability, which was classified as critical, was found in SourceCodester Doctors Appointment System 1.0. Affected is an unknown function of the file /admin/add-new.php of the component Parameter Handler. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-221826 is the identifier assigned to this vulnerability. Published: 2023-02-27T11:08:31.912Z Updated: 2024-08-02T05:32:46.350Z Open on db.gcve.eu Reference links https://vuldb.com/?id.221826 https://vuldb.com/?ctiid.221826 https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%20system%20vlun5.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1061`	vulnerable	2026-06-08 05:52:33.725341	SourceCodester Doctors Appointment System edit-doc.php sql injection MEDIUM (6.3) A vulnerability, which was classified as critical, has been found in SourceCodester Doctors Appointment System 1.0. This issue affects some unknown processing of the file /admin/edit-doc.php. The manipulation of the argument email/oldmail leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2023-02-27T11:08:30.134Z Updated: 2025-05-17T09:57:25.418Z Open on db.gcve.eu Reference links https://vuldb.com/?id.221825 https://vuldb.com/?ctiid.221825 https://vuldb.com/?submit.95223 https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%20system%20vlun4.pdf https://www.sourcecodester.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1059`	vulnerable	2026-06-08 05:52:33.721852	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1058`	vulnerable	2026-06-08 05:52:33.721201	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1057`	vulnerable	2026-06-08 05:52:33.720842	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1056`	vulnerable	2026-06-08 05:52:33.719691	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Doctors Appointment System

PURL mappings

Vulnerability references

Contribute