Security Advisory
CVE-2020-29168
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
SQL Injection vulnerability in Projectworlds Online Doctor Appointment Booking System, allows attackers to gain sensitive information via the q parameter to the getuser.php endpoint.