CVE-2024-10987

Name of the Vulnerable Software and Affected Versions code-projects E-Health Care System version 1.0

Description A critical issue was found in the code-projects E-Health Care System, affecting an unknown functionality of the file /Doctor/user appointment.php. The manipulation of the arguments schedule id, schedule date, schedule day, start time, end time, and booking leads to SQL injection. The attack can be launched remotely.

Recommendations For code-projects E-Health Care System version 1.0, patch immediately and validate input sanitization on the backend to prevent SQL injection attacks. As a temporary workaround, consider restricting access to the vulnerable file /Doctor/user appointment.php until a patch is available.