Doctor Appointment System Project Doctor Appointment System 1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:doctor_appointment_system_project:doctor_appointment_system:1.0:*:*:*:*:*:*:*part: a version: 1.0 update: *
| Vendor | Doctor Appointment System Project (39403ae0-fd01-555f-8565-a07ca8baa752) |
|---|---|
| Product | Doctor Appointment System (a9e89d38-2141-5fb5-8ee1-3869d126a4e6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/tshetty1/doctor-appointment-system |
purl2cpe | 2026-06-01 10:18:00.871575 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-40945 |
vulnerable | 2026-06-08 06:11:04.766618 |
Details available
Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php.
Published: 2023-09-11T00:00:00.000Z
Updated: 2024-09-26T15:55:37.721Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39852 |
vulnerable | 2026-06-08 06:09:38.057950 |
Details available
Doctormms v1.0 was discovered to contain a SQL injection vulnerability via the $userid parameter at myAppoinment.php. NOTE: this is disputed by a third party who claims that the userid is a session variable controlled by the server, and thus cannot be used for exploitation. The original reporter counterclaims that this originates from $_SESSION["userid"]=$_POST["userid"] at line 68 in doctors\doctorlogin.php, where userid under POST is not a session variable controlled by the server.
Published: 2023-08-15T00:00:00.000Z
Updated: 2024-08-02T18:18:10.003Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27320 |
vulnerable | 2026-06-08 05:31:20.988326 |
Details available
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter.
Published: 2021-03-24T13:46:28.000Z
Updated: 2024-08-03T20:48:16.387Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27319 |
vulnerable | 2026-06-08 05:31:20.987846 |
Details available
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via email parameter.
Published: 2021-03-24T13:45:59.000Z
Updated: 2024-08-03T20:48:16.106Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27318 |
vulnerable | 2026-06-08 05:31:20.987450 |
Details available
Cross Site Scripting (XSS) vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to inject arbitrary web script or HTML via the lastname parameter.
Published: 2021-03-01T20:14:14.000Z
Updated: 2024-08-03T20:48:16.036Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27317 |
vulnerable | 2026-06-08 05:31:20.987061 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27316 |
vulnerable | 2026-06-08 05:31:20.986761 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27315 |
vulnerable | 2026-06-08 05:31:20.986459 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27314 |
vulnerable | 2026-06-08 05:31:20.985965 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27124 |
vulnerable | 2026-06-08 05:30:45.984762 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.