CVE-2021-27124

SQL injection in the expertise parameter in search_result.php in Doctor Appointment System v1.0 allows an authenticated patient user to dump the database…

published February 18, 2021

CVSS
—
EPSS
6%
Percentile
93.1
In the wild
Unconfirmed
What it is

SQL injection in the expertise parameter in search_result.php in Doctor Appointment System v1.0 allows an authenticated patient user to dump the database credentials via a SQL injection attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05831 · 93.1th percentile
Published
2021-02-18T03:06Z
EPSS history
Timeline
  • 18 FEB 03:06Z
    SQL injection in the expertise parameter in search_result.php in Doctor Appointment System v1.0 allows an authenticated patient user to dump the database…
    cvelistv5