Doctor's Appointment System vulnerabilities
1 known vulnerability in Doctor's Appointment System from Doctor's Appointment System Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
Doctor's Appointment System: Authorization Bypass Through User-Controlled Key
Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php. The settings.php is affected by Broken Access Control (IDOR) via id= parameter.