CVE-2025-64081: Patients Waiting Area Queue Management System: SQL enjeksiyonu

Açıklama (NVD)

SQL injection vulnerability in /php/api_patient_schedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter.

Özet bilgiler

Ürün

Pamzey Patients Waiting Area Queue Management System

CVSS v3.1

9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,41 (yüzdelik 35)

CWE

CWE-89

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• packetstorm.news
• www.sourcecodester.com
• CWE-89