CVE-2021-27320: SQL Injection
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-27320?
The severity of CVE-2021-27320 is high with a severity value of 7.5.
How does CVE-2021-27320 affect Doctor Appointment System?
CVE-2021-27320 affects Doctor Appointment System version 1.0.
What is the vulnerability type of CVE-2021-27320?
CVE-2021-27320 is a blind SQL injection vulnerability.
How can an attacker exploit CVE-2021-27320?
An unauthenticated attacker can exploit CVE-2021-27320 by inserting malicious SQL queries via the firstname parameter in contactus.php.
Are there any references available for CVE-2021-27320?
Yes, you can find more information about CVE-2021-27320 at the following references: - [Packet Storm Security](http://packetstormsecurity.com/files/161642/Doctor-Appointment-System-1.0-Blind-SQL-Injection.html) - [Source Codester](https://www.sourcecodester.com/php/14182/doctor-appointment-system.html)