CVE-2020-29283

The CVE-2020-29283 entry concerns the Online Doctor Appointment Booking System (PHP and MySQL). The vulnerability is an SQL injection in the getuser.php endpoint, exploitable via the q parameter. Affected component is the server-side PHP script handling getuser.php queries, with the underlying ca...

CVE-2020-29168

The CVE-2020-29168 entry describes a SQL Injection in the Projectworlds Online Doctor Appointment Booking System. Affected component: the getuser.php endpoint, where user input in the q parameter is not properly sanitized. Impact is high (CVE metrics: Confidentiality/Integrity/Availability all Hi...