Threats affecting pkg:github/dyh1213-wq/cve

SourceCodester Simple Doctors Appointment System version 1.0 contains a SQL injection vulnerability in the /admin/ajax.php? action=login2 endpoint. The flaw arises from improper handling of the 'email' parameter, allowing remote attackers to manipulate SQL queries. This vulnerability has a CVSS 4.0 base score of 6.9, indicating medium severity. No official patch or remediation guidance is currently provided, and no known exploits have been reported in the wild.

A vulnerability was detected in itsourcecode University Management System 1.0. This affects an unknown part of the file /att_single_view.php. The manipulation of the argument dt results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used.

A security vulnerability has been detected in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /admin_single_student_update.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.