CVE-2022-42073

Name of the Vulnerable Software and Affected Versions Online Diagnostic Lab Management System version 1.0

Description The issue concerns SQL Injection, which can be exploited via the "/diagnostic/editclient.php?id=" API endpoint. This allows for potential manipulation of database queries by injecting malicious SQL code.

Recommendations For Online Diagnostic Lab Management System version 1.0, consider restricting access to the "/diagnostic/editclient.php" API endpoint until a patch is available. As a temporary workaround, avoid using the id parameter in the affected endpoint to minimize the risk of exploitation.