Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2022-36202

Published: 31/08/2022 Updated: 14/02/2024
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 0
Subscribe to Doctor\'s Appointment System

Vulnerability Summary

Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php. The settings.php is affected by Broken Access Control (IDOR) via id= parameter.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

doctor\\'s appointment system project doctor\\'s appointment system 1.0

Github Repositories

https://github.com/aznull/CVEs

a list of my CVEs

a list of my CVEs CVE-2022-36201 A Blind SQLi vulnerability was found in Doctor's Appointment System version 10 cvemitreorg/cgi-bin/cvenamecgi?name=CVE-2022-36201 CVE-2022-36202 Doctor's Appointment System version 10 was affected by Improper Access Control vulnerability leads to privilege escalation cvemitreorg/cgi-bin/cvenamecgi?name=CVE-2

References

CWE-639https://www.sourcecodester.com/hashenudara/simple-doctors-appointment-project.htmlhttp://hshnudr.comhttps://github.com/aznull/CVEshttps://nvd.nist.govhttps://github.com/aznull/CVEs
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook