Online Diagnostic Lab Management System vulnerabilities

20 known vulnerabilities in Online Diagnostic Lab Management System from Online Diagnostic Lab Management System Project. 20 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

20vulnerabilities

3critical

17high

0exploited

7.7average CVSS score

Latest first

7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43163Nov 17, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /clients/view_client.php.
9.8 Critical severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43135Nov 16, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php.
9.8 Critical severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43058Nov 9, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms//classes/Master.php?f=delete_activity.
7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43052Nov 7, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Users.php?f=delete.
7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43051Nov 7, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Users.php?f=delete_test.
7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43063Nov 3, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Users.php?f=delete_client.
7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43062Nov 3, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_appointment.
7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43068Nov 2, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_reservation.
7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43066Nov 2, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Master.php?f=delete_message.
7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43227Nov 2, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/admin/?page=appointments/view_appointment.
8.8 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43226Nov 2, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/?page=appointments/view_appointment.
7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43127Nov 1, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/update_status.php.
7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43126Nov 1, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/tests/manage_test.php.
7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43125Nov 1, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/manage_appointment.php.
7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-43124Nov 1, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manage_user.
7.2 High severity
Online Diagnostic Lab Management System: Unrestricted Upload of File with Dangerous Type
CVE-2022-41534Oct 13, 2022Online Diagnostic Lab Management System ProjectEPSS 1.54%
Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /php_action/createOrder.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
7.2 High severity
Online Diagnostic Lab Management System: Unrestricted Upload of File with Dangerous Type
CVE-2022-41533Oct 13, 2022Online Diagnostic Lab Management System ProjectEPSS 1.28%
Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /php_action/editProductImage.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
7.2 High severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-41513Oct 7, 2022Online Diagnostic Lab Management System Project
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /diagnostic/edittest.php.
7.2 High severity
Online Diagnostic Lab Management System: Unrestricted Upload of File with Dangerous Type
CVE-2022-41512Oct 7, 2022Online Diagnostic Lab Management System ProjectEPSS 1.28%
An arbitrary file upload vulnerability in the component /php_action/editFile.php of Online Diagnostic Lab Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
9.8 Critical severity
Online Diagnostic Lab Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-37152Aug 26, 2022Online Diagnostic Lab Management System ProjectEPSS 1.14%
An issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection vulnerability via "dob" parameter in "/classes/Users.php?f=save_client"