CVE-2023-1057

CWE-89 — SQL Injection3 documents3 sources
Severity
8.8HIGH
EPSS
0.3%
top 47.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester Doctors Appointment SystemDoctors Appointment System Project Doctors Appointment System
Timeline
PublishedFeb 27

Description

A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been rated as critical. Affected by this issue is the function edoc of the file login.php. The manipulation of the argument usermail leads to sql injection. VDB-221822 is the identifier assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LExploitability: 2.1 | Impact: 3.4

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-mrmq-w889-437f: A vulnerability was found in SourceCodester Doctors Appointment System 1↗2023-02-27
▶
CVEList
SourceCodester Doctors Appointment System login.php edoc sql injection↗2023-02-27
▶
CVE-2023-1057 (HIGH CVSS 8.8) | A vulnerability was found in Source | cvebase.io