Online Diagnostic Lab Management System Project vulnerabilities

We track 20 vulnerabilities in Online Diagnostic Lab Management System Project products. 20 are rated high or critical, and none are known to be exploited. The most recent was published on November 17, 2022.

20vulnerabilities

3critical

17high

0exploited

7.7average CVSS score

Latest Online Diagnostic Lab Management System Project vulnerabilities

7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43163Nov 17, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /clients/view_client.php.
9.8 Critical severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43135Nov 16, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php.
9.8 Critical severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43058Nov 9, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms//classes/Master.php?f=delete_activity.
7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43052Nov 7, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Users.php?f=delete.
7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43051Nov 7, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Users.php?f=delete_test.
7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43063Nov 3, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Users.php?f=delete_client.
7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43062Nov 3, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_appointment.
7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43068Nov 2, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_reservation.
7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43066Nov 2, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Master.php?f=delete_message.
7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43227Nov 2, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/admin/?page=appointments/view_appointment.
8.8 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43226Nov 2, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/?page=appointments/view_appointment.
7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43127Nov 1, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/update_status.php.
7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43126Nov 1, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/tests/manage_test.php.
7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43125Nov 1, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/manage_appointment.php.
7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43124Nov 1, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manage_user.
7.2 High severity
Online Diagnostic Lab Management System: Unrestricted Upload of File with Dangerous Type
CVE-2022-41534Oct 13, 2022Online Diagnostic Lab Management System ProjectEPSS 1.54%
Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /php_action/createOrder.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
7.2 High severity
Online Diagnostic Lab Management System: Unrestricted Upload of File with Dangerous Type
CVE-2022-41533Oct 13, 2022Online Diagnostic Lab Management System ProjectEPSS 1.28%
Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /php_action/editProductImage.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-41513Oct 7, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /diagnostic/edittest.php.
7.2 High severity
Online Diagnostic Lab Management System: Unrestricted Upload of File with Dangerous Type
CVE-2022-41512Oct 7, 2022Online Diagnostic Lab Management System ProjectEPSS 1.28%
An arbitrary file upload vulnerability in the component /php_action/editFile.php of Online Diagnostic Lab Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
9.8 Critical severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-37152Aug 26, 2022Online Diagnostic Lab Management System ProjectEPSS 1.14%
An issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection vulnerability via "dob" parameter in "/classes/Users.php?f=save_client"