CVE-2022-36543: SQL Injection
Published Aug 26, 2022
·Updated
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/doctors.php.
Affected Software
2 affected components
Edoc-doctor-appointment-system Project Edoc-doctor-appointment-system=1.0.1
Hashenudara Edoc-doctor-appointment-system=1.0.1
Event History
Aug 26, 2022
CVE Published
via MITRE·08:37 PM
Data Sourced
via MITRE·08:37 PM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2022-36543?
CVE-2022-36543 is a SQL injection vulnerability found in Edoc-doctor-appointment-system v1.0.1.
2
How severe is CVE-2022-36543?
CVE-2022-36543 has a severity rating of 9.8 (Critical).
3
What is the affected software version?
The affected software version is Edoc-doctor-appointment-system v1.0.1.
4
How can I exploit the vulnerability?
You can exploit the vulnerability by passing a malicious SQL query through the 'id' parameter at /patient/doctors.php.
5
How do I fix CVE-2022-36543?
To fix CVE-2022-36543, update Edoc-doctor-appointment-system to a version that resolves the SQL injection vulnerability.