ZeroHour

CVE-2021-41660

PoC
CVSS 3.1
9.8 critical
EPSS
1%p68
Published
()
Modified
Description

SQL injection vulnerability in Sourcecodester Patient Appointment Scheduler System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password fields to login.php.

Vendors
patient appointment scheduler system project
Products
patient appointment scheduler system
Weakness
CWE-89
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.