CVE-2025-7765: code-projects Online Appointment Booking System addmanagerclinic.php sql injection
A vulnerability classified as critical was found in code-projects Online Appointment Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/addmanagerclinic.php. The manipulation of the argument clinic leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7765?
CVE-2025-7765 is classified as a critical vulnerability.
How does the SQL injection vulnerability in CVE-2025-7765 occur?
The SQL injection in CVE-2025-7765 occurs due to improper handling of the 'clinic' argument in the file /admin/addmanagerclinic.php.
Who is affected by CVE-2025-7765?
CVE-2025-7765 affects users of the code-projects Online Appointment Booking System version 1.0.
What can be the impact of exploiting CVE-2025-7765?
Exploiting CVE-2025-7765 can lead to unauthorized access to the database and manipulation of sensitive data.
How can I fix the vulnerability CVE-2025-7765?
To fix CVE-2025-7765, input validation and prepared statements should be implemented to prevent SQL injection.