| शीर्षक | subhajitkhan online-clinic-management-system e9ee77a8827a1446220fa07ee693dc4d9a29a578 SQL Injection |
|---|
| विवरण | `doctorlogin.php` places the `doc_mail` and `doc_pswd` POST values directly in the authentication statement at lines 5-10. On any one-row result, lines 14-17 persist the untrusted email value in `$_SESSION['docmail']`. `doctorhome.php` uses that session value in another concatenated query at lines 6-8. An attacker can inject a true predicate in `doc_mail`, receive a successful login redirect without the doctor's password, and preserve the injection in the session so the doctor portal loads the victim record. This provides unauthenticated access to doctor functions and associated patient appointment data. |
|---|
| स्रोत | ⚠️ https://github.com/subhajitkhan/online-clinic-management-system/issues/3 |
|---|
| उपयोगकर्ता | wer0823 (UID 82272) |
|---|
| सबमिशन | 10/08/2026 01:29 PM (1 महीना पहले) |
|---|
| संयम | 13/09/2026 05:35 PM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 403307 [subhajitkhan online-clinic-management-system तक e9ee77a8827a1446220fa07ee693dc4d9a29a578 doctorlogin.php doc_mail/doc_pswd SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|