Acc1Ofl4G

**Name of the Vulnerable Software and Affected Versions** itsourcecode Hospital Management System version 1.0 **Description** An issue exists in the Appointment Handler component within the file `/appointmentapproval.php`. A remote attacker can perform a SQL injection by manipulating the `editid` argument. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database. **Recommendations** Update itsourcecode Hospital Management System version 1.0 to a patched version. As a temporary mitigation, restrict access to the `/appointmentapproval.php` file.