CVE-2025-2640 in Doctor Appointment Management Systeminformation

Résumé

par MITRE • 23/03/2025

A vulnerability was found in PHPGurukul Doctor Appointment Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /doctor/appointment-bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Responsable

VulDB

Divulgation

23/03/2025

Modérer

accepté

Entrée

VDB-300641

CPE

prêt

Exploitation

Télécharger

EPSS

0.00481

KEV

non

Activités

très faible

Sources

Do you need the next level of professionalism?

Upgrade your account now!