NetSight
critical9.8

CVE-2021-41660

SQL injection vulnerability in Sourcecodester Patient Appointment Scheduler System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the …

Impact

SQL injection vulnerability in Sourcecodester Patient Appointment Scheduler System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password fields to login.php.

Affected products

VendorProductAffected versions
Patient Appointment Scheduler System ProjectPatient Appointment Scheduler System
Version 1.0

Weakness classification

References