CVE-2025-3181

CVE-2025-3181 affects the projectworlds Online Doctor Appointment Booking System 1.0. The vulnerability is in the file /patient/appointment.php with the scheduleDate parameter; manipulating scheduleDate leads to a SQL injection. It can be exploited remotely (no user interaction required). Multipl...

CVE-2025-3181 projectworlds Online Doctor Appointment Booking System appointment.php sql injection

A vulnerability, which was classified as critical, has been found in projectworlds Online Doctor Appointment Booking System 1.0. Affected by this issue is some unknown functionality of the file /patient/appointment.php?scheduleDate=1&appid=1. The manipulation of the argument scheduleDate leads to...