Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-82593
HistoryMar 31, 2022 - 12:00 a.m.

Patient Appointment Scheduler System SQL Injection Vulnerability

2022-03-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
patient appointment scheduler system
sql injection
online platform
clinic patients
login.php

EPSS

0.002

Percentile

59.4%

Patient Appointment Scheduler System is a patient appointment scheduling system project. It provides an online platform for clinic patients or potential patients to schedule appointments with physicians. patient Appointment Scheduler System version 1.0 contains a SQL injection vulnerability that stems from a lack of filtering and escaping of SQL data in the username and password fields in login.php. An attacker could use this vulnerability to execute arbitrary SQL commands via the login.php username and password fields.

EPSS

0.002

Percentile

59.4%

Related for CNVD-2022-82593