CVE-2021-27315: SQL Injection
Published Mar 24, 2021
·Updated
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter.
Affected Software
1 affected component
Doctor Appointment System Project Doctor Appointment System=1.0
Event History
Mar 24, 2021
CVE Published
via MITRE·01:41 PM
Data Sourced
via MITRE·01:41 PM
Description
Frequently Asked Questions
1
What is CVE-2021-27315?
CVE-2021-27315 is a vulnerability in Doctor Appointment System 1.0 that allows an unauthenticated attacker to perform blind SQL injection.
2
How does CVE-2021-27315 work?
CVE-2021-27315 works by allowing an attacker to inject malicious SQL queries through the 'comment' parameter in the contactus.php file.
3
What is the severity of CVE-2021-27315?
The severity of CVE-2021-27315 is high, with a CVSS score of 7.5.
4
What software is affected by CVE-2021-27315?
Doctor Appointment System 1.0 is affected by CVE-2021-27315.
5
How can CVE-2021-27315 be fixed?
To fix CVE-2021-27315, it is recommended to apply the latest patches or updates provided by the software vendor.