CVE-2020-29168

CRITICAL 9.8CVE-2020-29168 · Published 17/02/2023 · updated 17/06/2026

In short

CVE-2020-29168 is a CRITICAL (CVSS 9.8) vulnerability affecting online doctor appointment booking system php and mysql (online doctor appointment booking system php and mysql project).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 69.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
online doctor appointment booking system php and mysql online_doctor_appointment_booking_system_php_and_mysql_project	`= 1.0`	No fix yet

Description

SQL Injection vulnerability in Projectworlds Online Doctor Appointment Booking System, allows attackers to gain sensitive information via the q parameter to the getuser.php endpoint.

References

More vulnerabilities in online doctor appointment booking system php and mysql

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free