CVE-2025-3186

The CVE-2025-3186 entry describes a SQL injection vulnerability in projectworlds Online Doctor Appointment Booking System v1.0, exploitable via the /patient/invoice.php endpoint when the appid parameter is manipulated. Affected component: unknown functionality within that PHP file. Root cause: im...

CVE-2025-3181

CVE-2025-3181 affects the projectworlds Online Doctor Appointment Booking System 1.0. The vulnerability is in the file /patient/appointment.php with the scheduleDate parameter; manipulating scheduleDate leads to a SQL injection. It can be exploited remotely (no user interaction required). Multipl...

CVE-2025-3183

The CVE-2025-3183 entry concerns Project Worlds' Online Doctor Appointment Booking System v1.0. Affected component is the file /patient/patientupdateprofile.php, where manipulating the patientFirstName parameter yields SQL injection. The vulnerability is exploitable remotely and is publicly discl...

CVE-2025-3182

The data shows CVE-2025-3182 affecting projectworlds Online Doctor Appointment Booking System 1.0, with a SQL injection in /patient/getschedule.php caused by manipulating the q parameter. The vulnerability can be exploited remotely and the exploit has been disclosed publicly. Multiple connected s...

CVE-2025-3184

CVE-2025-3184 affects projectworlds Online Doctor Appointment Booking System 1.0. The vulnerability is a SQL injection in the /patient/profile.php endpoint (parameter patientFirstName, with patientId=1) caused by improper handling of input. The attack can be launched remotely and exploit details ...

CVE-2025-3185

Vulnerability CVE-2025-3185 affects Projectworlds Online Doctor Appointment Booking System 1.0. The /patient/patientupdateprofile.php endpoint’s patientFirstName parameter can be manipulated to trigger SQL injection, with remote exploitation reportedly possible and publicly disclosed. Multiple co...