First published: Mon Feb 27 2023(Updated: )
A vulnerability has been found in SourceCodester Doctors Appointment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/patient.php of the component Parameter Handler. The manipulation of the argument search leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221827.
Credit: cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
Doctors Appointment System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2023-1063 is high.
The affected software of CVE-2023-1063 is SourceCodester Doctors Appointment System 1.0.
The vulnerability type of CVE-2023-1063 is SQL injection.
To fix CVE-2023-1063, apply the latest patch or update provided by the software vendor.
More information about CVE-2023-1063 can be found at the following references: [Link 1](https://vuldb.com/?id.221827), [Link 2](https://vuldb.com/?ctiid.221827), [Link 3](https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%20system%20vlun6.pdf)