CVE-2022-36202 - Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.p

CVE-2022-36202

Summary

Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php. The settings.php is affected by Broken Access Control (IDOR) via id= parameter.

References

https://www.sourcecodester.com/hashenudara/simple-doctors-appointment-project.html
http://hshnudr.com
https://github.com/aznull/CVEs

Vulnerable Configurations

cpe:2.3:a:doctor\'s_appointment_system_project:doctor\'s_appointment_system:1.0:*:*:*:*:*:*:*
cpe:2.3:a:doctor\'s_appointment_system_project:doctor\'s_appointment_system:1.0:*:*:*:*:*:*:*

CVSS

Base:	None
Impact:
Exploitability:

CWE

CWE-639

CAPEC

Access

Vector	Complexity	Authentication

Impact

Confidentiality	Integrity	Availability

Last major update

14-02-2024 - 01:17

Published

31-08-2022 - 21:15

Last modified

14-02-2024 - 01:17