| शीर्षक | SourceCodester Patients Waiting Area Queue Management System 1.0 SQL Injection |
|---|
| विवरण | A SQL injection vulnerability has been identified both in the "pqms/php/api_patient_schedule.php" and the "pqms/php/api_patient_checkin.php" file of the "SourceCodester Patients Waiting Area Queue Management System" project. The vulnerability originates from the "appointmentID" parameter where attackers can inject malicious code that is directly incorporated into SQL queries without proper sanitization or validation. This allows threat actors to craft input values that manipulate the SQL query structure and execute unauthorized database operations.
|
|---|
| स्रोत | ⚠️ https://github.com/2H-K/mycve/issues/2 |
|---|
| उपयोगकर्ता | hacja (UID 92094) |
|---|
| सबमिशन | 02/11/2025 03:44 PM (11 महीनों पहले) |
|---|
| संयम | 15/11/2025 03:57 PM (13 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 332582 [SourceCodester Patients Waiting Area Queue Management System 1.0 api_patient_schedule.php appointmentID SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|