Login Request a demo
ED
Product
edoc-doctor-appointment-system
by HashenUdara · last CVE Oct 26, 2026
10
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 4High 3Medium 3Low 0
Severity
All severities10Critical4High3Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add edoc-doctor-appointment-system to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-65358
9.8
0%
Dec 2
Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointment.php
Affected: 1.0.1
CVE-2022-36545
9.8
1%
Aug 26
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/settings.php
Affected: 1.0.1
CVE-2022-36544
9.8
1%
Aug 26
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/booking.php
Affected: 1.0.1
CVE-2022-36543
9.8
1%
Aug 26
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/doctors.php
Affected: 1.0.1
CVE-2025-66918
8.8
1%
Dec 11
edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add-session.php via the "title" parameter
Affected: 1.0.1
CVE-2022-36546
8.8
1%
Aug 26
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a Cross-Site Request Forgery (CSRF) via /patient/settings.php
Affected: 1.0.1
CVE-2026-116112
New
7.3
0%
Oct 26
HashenUdara edoc-doctor-appointment-system add-new.php sql injection
Affected: cc258425b915d1af9e298777ccd26d160493e68d
CVE-2022-36542
6.5
1%
Aug 26
An access control issue in the component /ip/admin/ of Edoc-doctor-appointment-system v1.0.1 allows attackers to arbitrarily edit, read, and delete Administrator data
Affected: 1.0.1
CVE-2022-36547
6.1
1%
Aug 26
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability at /patient/index.php
Affected: 1.0.1
CVE-2022-36548
5.4
1%
Aug 26
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability at /patient/settings.php
Affected: 1.0.1
Showing 10