CVE-2025-4818: SourceCodester Doctor's Appointment System GET Parameter delete-doctor.php sql injection
A vulnerability was found in SourceCodester Doctor's Appointment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/delete-doctor.php of the component GET Parameter Handler. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4818?
CVE-2025-4818 is rated as critical due to its potential for SQL injection vulnerabilities.
How does CVE-2025-4818 affect the Doctor's Appointment System?
CVE-2025-4818 affects the handling of GET parameters in the /admin/delete-doctor.php file, allowing for SQL injection risks.
What versions of SourceCodester Doctor's Appointment System are vulnerable to CVE-2025-4818?
CVE-2025-4818 affects all versions of the SourceCodester Doctor's Appointment System currently identified.
How do I fix CVE-2025-4818?
To fix CVE-2025-4818, it is recommended to implement proper input validation and parameterized queries in the affected file.
What components of the SourceCodester Doctor's Appointment System are impacted by CVE-2025-4818?
CVE-2025-4818 specifically impacts the GET parameter handler component in the /admin/delete-doctor.php file.