CVE-2021-27315

PoC —

CVSS 3.1

7.5 high

EPSS

8%p94

Published

Mar 24, 2021 (Mar 24, 2021)

Modified

Jun 17, 2026

Description

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter.

Vendors: doctor appointment system project
Products: doctor appointment system
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (7.8%)

In the news0 stories

No ingested article mentions this CVE yet.