CVE-2021-27314
23Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 12%
exploitation probability
12%top 4% of all CVEs
observed exploitation
nono source reports it
SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page.
Affected products
n/a · n/a