CVE-2026-85403

A SQL injection vulnerability exists in code-projects Doctor Appointment System 1.0 via the firstname argument in /contactus.php. The flaw allows remote exploitation with no required privileges or user interaction, rated CVSS 3.1: 7.3 (HIGH) . The exploit has been published with proof-of-concept ...