Vulnerability Details CVE-2022-36202
Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php. The settings.php is affected by Broken Access Control (IDOR) via id= parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.2%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2022-36202
-
cpe:2.3:a:doctor's_appointment_system_project:doctor's_appointment_system:1.0