CVE-2021-27314

PoC —

CVSS 3.1

9.8 critical

EPSS

12%p96

Published

Mar 5, 2021 (Mar 5, 2021)

Modified

Jun 17, 2026

Description

SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page.

Vendors: doctor appointment system project
Products: doctor appointment system
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (12.4%)

In the news0 stories

No ingested article mentions this CVE yet.