CVE-2023-1061: SourceCodester Doctors Appointment System edit-doc.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Doctors Appointment System 1.0. This issue affects some unknown processing of the file /admin/edit-doc.php. The manipulation of the argument email/oldmail leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Other sources
A vulnerability, which was classified as critical, has been found in SourceCodester Doctors Appointment System 1.0. This issue affects some unknown processing of the file /admin/edit-doc.php. The manipulation of the argument oldmail leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221825 was assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-1061?
The severity of CVE-2023-1061 is high with a severity value of 8.8.
What is the affected software for CVE-2023-1061?
The affected software for CVE-2023-1061 is SourceCodester Doctors Appointment System 1.0.
What is the vulnerability type of CVE-2023-1061?
The vulnerability type of CVE-2023-1061 is SQL injection.
How does CVE-2023-1061 affect the system?
CVE-2023-1061 allows remote attackers to initiate an SQL injection attack by manipulating the 'oldmail' argument in the file /admin/edit-doc.php.
Are there any references for CVE-2023-1061?
Yes, you can find references for CVE-2023-1061 at the following links: [Link 1](https://vuldb.com/?id.221825), [Link 2](https://vuldb.com/?ctiid.221825), [Link 3](https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%20system%20vlun4.pdf).