CVE-2021-27314: SQL Injection
SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-27314?
CVE-2021-27314 is a vulnerability in the doctor appointment system 1.0 that allows an unauthenticated attacker to perform SQL injection through the username parameter on the login page.
How severe is CVE-2021-27314?
CVE-2021-27314 has a severity rating of 9.8, which is considered critical.
How can an attacker exploit CVE-2021-27314?
An attacker can exploit CVE-2021-27314 by inserting malicious SQL queries through the username parameter on the login page of the doctor appointment system 1.0.
What versions of the doctor appointment system are affected by CVE-2021-27314?
CVE-2021-27314 affects all versions of the doctor appointment system 1.0.
Is there a fix for CVE-2021-27314?
There is no specific fix mentioned for CVE-2021-27314, but it is recommended to update the doctor appointment system to the latest version and implement proper input validation and SQL injection prevention techniques.