CVE-2025-63718: SQL Injection
A SQL injection vulnerability exists in the SourceCodester PQMS (Patient Queue Management System) 1.0 in the apipatientschedule.php endpoint. The appointmentID parameter is not properly sanitized, allowing attackers to execute arbitrary SQL commands.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-63718?
CVE-2025-63718 is considered a critical SQL injection vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2025-63718?
To resolve CVE-2025-63718, ensure proper sanitization of the appointmentID parameter in the api_patient_schedule.php endpoint.
What systems are affected by CVE-2025-63718?
CVE-2025-63718 affects the SourceCodester PQMS (Patient Queue Management System) version 1.0.
What types of attacks can CVE-2025-63718 enable?
CVE-2025-63718 can enable attackers to perform unauthorized database queries and potentially compromise the application.
Is there a public exploit available for CVE-2025-63718?
While CVE-2025-63718 is publicly documented, specific exploit code is not widely available, increasing the need for immediate remediation.