CVE-2021-27124

概要

参考情報

• packetstormsecurity.com/files/161342/Doctor-Appointment-System-1.0-SQL-Injection.html · Exploit
• naku-ratti.medium.com/doctor-appointment-system-1-0-authenticated-sql-dios-7689b1d30f5f · Exploit
• sourcecodester.com/php/14182/doctor-appointment-system.html · Product

doctor appointment system のその他の脆弱性

• CVE-2023-40945緊急 9.8Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php.
• CVE-2023-39852緊急 9.8Doctormms v1.0 was discovered to contain a SQL injection vulnerability via the $userid parameter at myAppoinment.php. NOTE: this is disputed…
• CVE-2021-27320高 7.5Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via…
• CVE-2021-27319高 7.5Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via…
• CVE-2021-27316高 7.5Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via…