CVE-2023-1058
SourceCodester Doctors Appointment System create-account.php sql injection
HIGH 8.8EPSS 0.8%
A vulnerability classified as critical has been found in SourceCodester Doctors Appointment System 1.0. This affects an unknown part of the file create-account.php. The manipulation of the argument newemail leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221823.
- Affected
- SourceCodester · Doctors Appointment System
- CVSS v3.1 NVD
- 8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1 VULDB
- 7.3 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - CVSS v2.0 VULDB
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 0.76% chance of exploitation in the next 30 days, 55th percentile
- Published
- 2023-02-27
- Updated
- 2024-08-02
Proof-of-concept exploits (1)
- E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%…22★ · 2024-05-23