VYPR

Online Doctor Appointment Booking System

by Projectworlds

CVEs (10)

  • CVE-2020-29168CriFeb 17, 2023
    risk 0.64cvss 9.8epss 0.01

    SQL Injection vulnerability in Projectworlds Online Doctor Appointment Booking System, allows attackers to gain sensitive information via the q parameter to the getuser.php endpoint.

  • CVE-2025-3186HigApr 4, 2025
    risk 0.47cvss 7.3epss 0.01

    A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /patient/invoice.php. The manipulation of the argument appid leads to sql injection.…

  • CVE-2025-3185HigApr 3, 2025
    risk 0.47cvss 7.3epss 0.01

    A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. It has been classified as critical. Affected is an unknown function of the file /patient/patientupdateprofile.php. The manipulation of the argument patientFirstName leads to sql injection.…

  • CVE-2025-3184HigApr 3, 2025
    risk 0.47cvss 7.3epss 0.01

    A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0 and classified as critical. This issue affects some unknown processing of the file /patient/profile.php?patientId=1. The manipulation of the argument patientFirstName leads to sql injection.…

  • CVE-2025-3183HigApr 3, 2025
    risk 0.47cvss 7.3epss 0.01

    A vulnerability has been found in projectworlds Online Doctor Appointment Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /patient/patientupdateprofile.php. The manipulation of the argument patientFirstName leads to sql…

  • CVE-2025-3182HigApr 3, 2025
    risk 0.47cvss 7.3epss 0.01

    A vulnerability, which was classified as critical, was found in projectworlds Online Doctor Appointment Booking System 1.0. This affects an unknown part of the file /patient/getschedule.php. The manipulation of the argument q leads to sql injection. It is possible to initiate…

  • CVE-2025-3181HigApr 3, 2025
    risk 0.47cvss 7.3epss 0.01

    A vulnerability, which was classified as critical, has been found in projectworlds Online Doctor Appointment Booking System 1.0. Affected by this issue is some unknown functionality of the file /patient/appointment.php?scheduleDate=1&appid=1. The manipulation of the argument…

  • CVE-2025-3180HigApr 3, 2025
    risk 0.47cvss 7.3epss 0.01

    A vulnerability classified as critical was found in projectworlds Online Doctor Appointment Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /doctor/deleteschedule.php. The manipulation of the argument ID leads to sql injection. The…

  • CVE-2025-3179HigApr 3, 2025
    risk 0.47cvss 7.3epss 0.01

    A vulnerability classified as critical has been found in projectworlds Online Doctor Appointment Booking System 1.0. Affected is an unknown function of the file /doctor/deletepatient.php. The manipulation of the argument ic leads to sql injection. It is possible to launch the…

  • CVE-2025-3178HigApr 3, 2025
    risk 0.47cvss 7.3epss 0.01

    A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /doctor/deleteappointment.php. The manipulation of the argument ID leads to sql injection. The attack…