mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-30 17:29:30 +02:00
777 B
777 B
CVE-2021-27314
Description
SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page.
POC
Reference
- https://packetstormsecurity.com/files/161641/Doctor-Appointment-System-1.0-SQL-Injection.html
- https://packetstormsecurity.com/files/161641/Doctor-Appointment-System-1.0-SQL-Injection.html
Github
No PoCs found on GitHub currently.