CVE-2025-7587

CWE-74CWE-89 — SQL InjectionCWE-862 — Missing AuthorizationCWE-200 — Information Exposure6 documents5 sources
Severity
6.9MEDIUM
EPSS
0.1%
top 73.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Code-projects Online Appointment Booking SystemAnisha Online Appointment Booking System
Timeline
PublishedJul 14

Description

A vulnerability was found in code-projects Online Appointment Booking System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /cover.php. The manipulation of the argument uname/psw leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

4
CVEList
code-projects Online Appointment Booking System cover.php sql injection↗2025-07-14
▶
GHSA
GHSA-8j32-qr7c-vxv8: A vulnerability was found in code-projects Online Appointment Booking System 1↗2025-07-14
▶
GHSA
Backend.AI Missing Authorization vulnerability↗2025-06-09
▶
GHSA
BackendAI vulnerable to Exposure of Sensitive Information to an Unauthorized Actor↗2025-06-09
▶