CVE-2023-1056: SourceCodester Doctors Appointment System patient.php sql injection
A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /edoc/doctor/patient.php. The manipulation of the argument search12 leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221821 was assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-1056?
The severity of CVE-2023-1056 is high.
What is the affected software of CVE-2023-1056?
The affected software of CVE-2023-1056 is SourceCodester Doctors Appointment System 1.0.
What is the vulnerability type of CVE-2023-1056?
The vulnerability type of CVE-2023-1056 is SQL injection.
How can the SQL injection vulnerability in CVE-2023-1056 be exploited?
The SQL injection vulnerability in CVE-2023-1056 can be exploited by manipulating the 'search12' parameter.
Are there any references for CVE-2023-1056?
Yes, the references for CVE-2023-1056 can be found at the following links: [Reference Link 1](https://vuldb.com/?id.221821), [Reference Link 2](https://vuldb.com/?ctiid.221821), [Reference Link 3](https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20docker%20search.pdf).