NetSight
IP …
high7.5

CVE-2021-27316

Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via lastname parameter.

Impact

Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via lastname parameter.

Affected products

VendorProductAffected versions
Doctor Appointment System ProjectDoctor Appointment System
Version 1.0

Weakness classification

CWE-89

References