Doctormms v1.0 was discovered to contain a SQL injection vulnerability via the $userid parameter at myAppoinment.php. NOTE: this is disputed by a third party who claims that the userid is a session variable controlled by the server, and thus cannot be used for exploitation. The original reporter counterclaims that this originates from $_SESSION["userid"]=$_POST["userid"] at line 68 in doctors\doctorlogin.php, where userid under POST is not a session variable controlled by the server.
References
| Link | Resource |
|---|---|
| https://github.com/KLSEHB/vulnerability-report/blob/main/Doctormms_CVE-2023-39852 | Exploit Third Party Advisory |
| https://www.sourcecodester.com/php/14182/doctor-appointment-system.html | Product |
Configurations
Configuration 1 (hide)
|
History
07 Nov 2023, 04:17
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Doctormms v1.0 was discovered to contain a SQL injection vulnerability via the $userid parameter at myAppoinment.php. NOTE: this is disputed by a third party who claims that the userid is a session variable controlled by the server, and thus cannot be used for exploitation. The original reporter counterclaims that this originates from $_SESSION["userid"]=$_POST["userid"] at line 68 in doctors\doctorlogin.php, where userid under POST is not a session variable controlled by the server. |
13 Sep 2023, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | ** DISPUTED ** Doctormms v1.0 was discovered to contain a SQL injection vulnerability via the $userid parameter at myAppoinment.php. NOTE: this is disputed by a third party who claims that the userid is a session variable controlled by the server, and thus cannot be used for exploitation. The original reporter counterclaims that this originates from $_SESSION["userid"]=$_POST["userid"] at line 68 in doctors\doctorlogin.php, where userid under POST is not a session variable controlled by the server. |
21 Aug 2023, 17:51
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Doctor Appointment System Project doctor Appointment System
Doctor Appointment System Project |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CPE | cpe:2.3:a:doctor_appointment_system_project:doctor_appointment_system:1.0:*:*:*:*:*:*:* | |
| Summary | ** DISPUTED ** Doctormms v1.0 was discovered to contain a SQL injection vulnerability via the $userid parameter at myAppoinment.php. NOTE: this is disputed by a third party who indicates that the userid is a session variable controlled by the server, and thus cannot be used for exploitation. | |
| References | (MISC) https://github.com/KLSEHB/vulnerability-report/blob/main/Doctormms_CVE-2023-39852 - Exploit, Third Party Advisory | |
| References | (MISC) https://www.sourcecodester.com/php/14182/doctor-appointment-system.html - Product | |
| CWE | CWE-89 |
15 Aug 2023, 21:56
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-15 21:15
Updated : 2024-08-02 19:15
NVD link : CVE-2023-39852
Mitre link : CVE-2023-39852
CVE.ORG link : CVE-2023-39852
JSON object : View
Products Affected
doctor_appointment_system_project
- doctor_appointment_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')