CVE-2026-85225: code-projects Doctor Appointment System patient_login.php sql injection
A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patientlogin.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attack can be initiated remotely and requires no privileges or user interaction, according to the supplied vector. An attacker can target the email argument handled by /patient_login.php.
Is exploit code available?
Yes. A public exploit is available and might be used, which increases the likelihood of attempted exploitation.
How can I determine whether my deployment is affected?
Deployments of code-projects Doctor Appointment System 1.0 should review /patient_login.php, specifically handling of the email argument, for SQL injection exposure. The affected code location beyond that file is not specified.