CVE-2024-4293

A vulnerability classified as problematic was found in PHPGurukul Doctor Appointment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file appointment-bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-262225 was assigned to this vulnerability.

• CWE-79

• https://github.com/Sospiro014/zday1/blob/main/doctor_appointment_management_system_xss.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.262225Permissions Required, VDB Entry
• https://vuldb.com/?id.262225Permissions Required, VDB Entry
• https://vuldb.com/?submit.323586Third Party Advisory, VDB Entry
• https://github.com/Sospiro014/zday1/blob/main/doctor_appointment_management_system_xss.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.262225Permissions Required, VDB Entry
• https://vuldb.com/?id.262225Permissions Required, VDB Entry
• https://vuldb.com/?submit.323586Third Party Advisory, VDB Entry

Published

Apr 27, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-42914A host header injection vulnerability exists in the forgot p…9.1
• CVE-2024-42915A host header injection vulnerability in Staff Appraisal Sys…8
• CVE-2024-42918itsourcecode Online Accreditation Management System contains…5.4
• CVE-2024-42919eScan Management Console 14.0.1400.2281 is vulnerable to Inc…9.8
• CVE-2024-4292A vulnerability classified as critical has been found in Con…6.5
• CVE-2024-42922AAPanel v7.0.7 was discovered to contain an OS command injec…6.5
• CVE-2024-42930PbootCMS 3.2.8 is vulnerable to URL Redirect.6.1
• CVE-2024-42934OpenIPMI before 2.0.36 has an out-of-bounds array access (fo…5
• CVE-2024-42936The mqlink.elf is service component in Ruijie RG-EW300N with…9.8
• CVE-2024-42939A cross-site scripting (XSS) vulnerability in the component …5.4
• CVE-2024-4294A vulnerability, which was classified as critical, has been …8.8
• CVE-2024-42940Tenda FH1201 v1.2.0.14 (408) was discovered to contain a sta…7.5