CVE-2025-7751: code-projects Online Appointment Booking System addclinic.php sql injection
A vulnerability has been found in code-projects Online Appointment Booking System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/addclinic.php. The manipulation of the argument cid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7751?
CVE-2025-7751 is classified as critical due to its potential for SQL injection vulnerabilities.
How do I fix CVE-2025-7751?
To fix CVE-2025-7751, validate and sanitize user inputs properly, specifically for the cid argument, to prevent SQL injection.
Which software is affected by CVE-2025-7751?
CVE-2025-7751 affects version 1.0 of the code-projects Online Appointment Booking System.
What type of vulnerability is CVE-2025-7751?
CVE-2025-7751 is a SQL injection vulnerability found in the /admin/addclinic.php file.
What kind of attacks can result from CVE-2025-7751?
Exploitation of CVE-2025-7751 can lead to unauthorized access and manipulation of the database.