2021-03-04 23:32:50
mitre
PUBLISHED
SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page.