Phpgurukul Doctor Appointment Management System vulnerabilities

12 CVEs affecting Phpgurukul Doctor Appointment Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-45805, published 2025-09-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-4294, published 2024-04-27. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in PHPGurukul Doctor Appointment Management System 1.0. Affected by this issue is some unknown functionality of the file…
CVE-2024-4293, published 2024-04-27. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability classified as problematic was found in PHPGurukul Doctor Appointment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file…
CVE-2025-2383, published 2025-03-17. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in PHPGurukul Doctor Appointment Management System 1.0. Affected by this issue is some unknown functionality of the file…
CVE-2025-2640, published 2025-03-23. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul Doctor Appointment Management System 1.0 and classified as critical. This issue affects some unknown processing of the file…
CVE-2022-45728, published 2023-01-12. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability.
CVE-2022-45730, published 2023-01-26. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. A cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search…
CVE-2025-2649, published 2025-03-23. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in PHPGurukul Doctor Appointment Management System 1.0. This vulnerability affects unknown code of the file /check-appointment.php. The manipulation…
CVE-2022-45729, published 2023-01-12. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. A cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee ID…
CVE-2022-46128, published 2023-01-26. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting (XSS) via searchdata=.
CVE-2025-45805, published 2025-09-03. High severity, CVSS 7.6. EPSS: 0.4% chance of exploitation in the next 30 days. In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript code into their profile name. This payload is subsequently rendered without proper…

Latest

CVE-2025-50493, published 2025-07-28. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows attackers to execute a session hijacking attack.
CVE-2024-48807, published 2024-10-30. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter.