CVE-2025-7752: code-projects Online Appointment Booking System deletedoctor.php sql injection
A vulnerability was found in code-projects Online Appointment Booking System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/deletedoctor.php. The manipulation of the argument did leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7752?
CVE-2025-7752 is classified as a critical vulnerability.
How does CVE-2025-7752 exploit occur?
CVE-2025-7752 allows for SQL injection through improper handling of user input in the /admin/deletedoctor.php file.
Which software is affected by CVE-2025-7752?
CVE-2025-7752 affects the Code-projects Online Appointment Booking System version 1.0.
What are the potential impacts of CVE-2025-7752?
Exploitation of CVE-2025-7752 could allow attackers to manipulate the database and access sensitive information.
How do I fix CVE-2025-7752?
To fix CVE-2025-7752, validate and sanitize all user inputs before processing them in the application.