CVE-2025-7750

Name of the Vulnerable Software and Affected Versions code-projects Online Appointment Booking System version 1.0

Description A critical vulnerability exists in code-projects Online Appointment Booking System. The issue involves a SQL injection vulnerability in an unknown function of the /admin/adddoctorclinic.php file. The clinic argument is susceptible to manipulation, allowing for remote exploitation. The exploit has been publicly disclosed.

Recommendations As a temporary workaround, consider restricting access to the /admin/adddoctorclinic.php file until a fix is available. Sanitize the clinic argument to prevent SQL injection attacks.