NetSight
IP …
critical9.8

CVE-2021-27314

SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login …

Impact

SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page.

Affected products

VendorProductAffected versions
Doctor Appointment System ProjectDoctor Appointment System
Version 1.0

Weakness classification

CWE-89

References