Doctor Appointment Management System (Phpgurukul) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2025-09-03. Vendor: Phpgurukul.
CVEs of Doctor Appointment Management System
- CVE-2025-45805 - CVSS 7.6 (high), 2025-09-03: In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript code into their profile name. This…
- CVE-2025-50493 - CVSS 7.5 (high), 2025-07-28: Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows attackers to execute a…
- CVE-2025-2649 - CVSS 9.8 (critical), 2025-03-23: A vulnerability classified as critical was found in PHPGurukul Doctor Appointment Management System 1.0. This vulnerability affects unknown code of the file…
- CVE-2025-2640 - CVSS 9.8 (critical), 2025-03-23: A vulnerability was found in PHPGurukul Doctor Appointment Management System 1.0 and classified as critical. This issue affects some unknown processing of the…
- CVE-2025-2383 - CVSS 9.8 (critical), 2025-03-17: A vulnerability, which was classified as critical, has been found in PHPGurukul Doctor Appointment Management System 1.0. Affected by this issue is some…
- CVE-2024-48807 - CVSS 5.4 (medium), 2024-10-30: Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search…
- CVE-2024-4294 - CVSS 8.8 (high), 2024-04-27: A vulnerability, which was classified as critical, has been found in PHPGurukul Doctor Appointment Management System 1.0. Affected by this issue is some…
- CVE-2024-4293 - CVSS 5.4 (medium), 2024-04-27: A vulnerability classified as problematic was found in PHPGurukul Doctor Appointment Management System 1.0. Affected by this vulnerability is an unknown…
- CVE-2022-46128 - CVSS 6.1 (medium), 2023-01-26: phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting (XSS) via searchdata=.
- CVE-2022-45730 - CVSS 6.1 (medium), 2023-01-26: A cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a…
- CVE-2022-45729 - CVSS 6.1 (medium), 2023-01-12: A cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a…
- CVE-2022-45728 - CVSS 6.1 (medium), 2023-01-12: Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability.
