Doctor Appointment System 1.0 SQL Injection [CVE-2021-27314]
CVE number = CVE-2021-27314
SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page.
The comment parameter has no input validation.
Please update in order to resolve this issue.
Further information – https://packetstormsecurity.com/files/161641/Doctor-Appointment-System-1.0-SQL-Injection.html
I am one of the editors here at www.systemtek.co.uk I am a UK based technology professional, with an interest in computer security and telecoms.