mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-13 01:44:43 +02:00
784 B
784 B
CVE-2021-27320
Description
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter.
POC
Reference
- http://packetstormsecurity.com/files/161642/Doctor-Appointment-System-1.0-Blind-SQL-Injection.html
- http://packetstormsecurity.com/files/161642/Doctor-Appointment-System-1.0-Blind-SQL-Injection.html
Github
No PoCs found on GitHub currently.