high7.3
CVE-2025-13248
A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0.
Impact
A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown function of the file /php/api_patient_schedule.php. This manipulation of the argument appointmentID causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pamzey | Patients Waiting Area Queue Management System | Version 1.0 |