| Title | code-projects Doctor Appointment System In PHP With Source Code 1.0 SQL Injection |
|---|
| Description | The vulnerability exists in the patient_login.php endpoint, where user-supplied input provided through the email parameter is incorporated into a backend SQL query without using parameterized statements or sufficient input validation.
An attacker can inject specially crafted SQL expressions into the email parameter to manipulate the SQL query executed by the database server. By using time-delay functions such as SLEEP(), an attacker can determine whether injected SQL statements are executed based on measurable response delays, even when the application does not display SQL errors or query results.
For example, supplying a payload containing the MySQL SLEEP(20) function causes the application to delay its response by approximately 20 seconds if the injected SQL expression is successfully evaluated. This confirms that the application is vulnerable to blind SQL injection.
Because the vulnerability occurs during the authentication process, an attacker can remotely interact with the affected endpoint without requiring valid credentials. Once confirmed, the vulnerability may be leveraged to enumerate the database structure, extract sensitive information, recover administrator and patient records, obtain password hashes, bypass authentication under certain conditions, and facilitate further attacks against the application.
The issue is caused by unsafe construction of SQL queries using untrusted user input and the absence of prepared statements. Successful exploitation may result in unauthorized disclosure of confidential information and compromise of the application's database.
|
|---|
| Source | ⚠️ https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Time-Based%20Blind%20SQL%20Injection%20in%20Doctor%20Appointment%20System%20email%20Parameter.md |
|---|
| User | AhmadMarzook (UID 96211) |
|---|
| Submission | 07/17/2026 21:19 (2 months ago) |
|---|
| Moderation | 09/03/2026 16:32 (2 months later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 398424 [code-projects Doctor Appointment System 1.0 /patient_login.php email sql injection] |
|---|
| Points | 20 |
|---|