cbcvebase.
CVE-2021-27314
published 2021-03-05

CVE-2021-27314: SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login…

PriorityP270critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EXPLOIT
EPSS
12.39%
95.7th percentile
SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page.

Affected

1 ranges
VendorProductVersion rangeFixed in
doctor_appointment_system_projectdoctor_appointment_system——

Detection & IOCsextracted from sources · hover to see the quote

path/admin/↗
filenameadmin.php↗
commandusername=test'+AND+(SELECT+6133+FROM+(SELECT(SLEEP(6)))nOqb)+AND+'RiUU'='RiUU&password=test&submit=↗
  • →Detect time-based blind SQLi attempts against the Doctor Appointment System login: look for POST requests to /admin/ with a username parameter containing SLEEP() payloads and a response duration >= 6 seconds with HTTP 200. ↗
  • →Match response body containing 'Doctor Appoinment System' (note the typo) combined with a POST to /admin/ as a fingerprint for the vulnerable application. ↗
  • →The attack is unauthenticated and targets the username parameter via Content-Type: application/x-www-form-urlencoded on the admin login page. ↗
  • ·The Nuclei template uses a 10-second HTTP timeout (@timeout: 10s) and a SLEEP(6) payload; detection rules based on response duration should account for network latency to avoid false negatives. ↗
  • ·The vulnerability affects Doctor Appointment System version 1.0 specifically; the CPE is cpe:2.3:a:doctor_appointment_system_project:doctor_appointment_system:1.0. ↗

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.