CVE-2022-36750

CVE-2022-36750 : Clinic’s Patient Management System v1.0 is vulnerable to SQL injection through /pms/update_user.php?id=. The CVSS 3.1 base score is 9.8 (CRITICAL) with network attack vector, low complexity, and no privileges required. Affected component is the update_user endpoint handling the i...