Online Medicine Guide /addelivery.php File SQL Injection Vulnerability

Online Medicine Guide is an online medical guide. Online Medicine Guide suffers from a SQL injection vulnerability that stems from the lack of validation of an externally entered SQL statement in the parameter deName in the file /addelivery.php. The vulnerability can be exploited by an attacker t...

CVE-2025-9027

The CVE-2025-9027 entry affects code-projects Online Medicine Guide 1.0, specifically the /addelivery.php endpoint. The root cause is improper handling of the deName parameter, enabling SQL injection that can be exploited remotely and has already been disclosed publicly. Impact is described consi...

PT-2025-33472 · Code Projects · Online Medicine Guide

Name of the Vulnerable Software and Affected Versions: code-projects Online Medicine Guide version 1.0 Description: A vulnerability has been found in code-projects Online Medicine Guide 1.0. The manipulation of the argument deName in the file /addelivery.php leads to SQL injection. The attack can...