CyberRota Analysis
AI-GeneratedA SQL injection vulnerability in the Doctor Appointment System 1.0 allows remote attackers to manipulate the `doc_id` parameter in the `/patient/booking.php` file, potentially compromising the database. Organizations using this system should prioritize patching or mitigating this vulnerability due to its high severity and the public availability of exploit code. Immediate action is recommended to prevent unauthorized access and data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the argument doc_id results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.