Sql injection

2023-08-2023:15:00

PRIOn knowledge base

www.prio-n.com

sourcecodester hospital management system

sql injection

appointment.php

remote attack

vdb-237561

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.3%

JSON

A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been classified as critical. This affects an unknown part of the file appointment.php. The manipulation of the argument sheduledate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237561 was assigned to this vulnerability.

CPENameOperatorVersion
free_hospital_management_system_for_small_practiceseq1.0

CPE	Name	Operator	Version
	free_hospital_management_system_for_small_practices	eq	1.0

References

github.com/CookedMelon/cve/tree/master/hospital/patient

vuldb.com/?ctiid.237561

vuldb.com/?id.237561