CVE-2025-7516: code-projects Online Appointment Booking System cancelbookingpatient.php sql injection
A vulnerability classified as critical was found in code-projects Online Appointment Booking System 1.0. This vulnerability affects unknown code of the file /cancelbookingpatient.php. The manipulation of the argument appointment leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7516?
CVE-2025-7516 is classified as a critical vulnerability.
How does CVE-2025-7516 exploit the Online Appointment Booking System?
CVE-2025-7516 exploits the system through SQL injection via the appointment argument in the cancelbookingpatient.php file.
Who is affected by CVE-2025-7516?
Users of Code-projects Online Appointment Booking System 1.0 are affected by CVE-2025-7516.
How can I mitigate CVE-2025-7516?
To mitigate CVE-2025-7516, validate and sanitize user input before processing database queries.
Are there any patches available for CVE-2025-7516?
Currently, there are no official patches available for CVE-2025-7516 from the vendor.