CVE-2025-13248

Name of the Vulnerable Software and Affected Versions SourceCodester Patients Waiting Area Queue Management System version 1.0

Description A flaw exists in SourceCodester Patients Waiting Area Queue Management System 1.0. The issue involves SQL injection stemming from manipulation of the appointmentID argument within an unknown function of the /php/api patient schedule.php file. This allows for remote exploitation and the exploit is publicly available.

Recommendations Apply any available updates or patches for the affected system. As a temporary workaround, restrict access to the /php/api patient schedule.php file. Sanitize the appointmentID input to prevent SQL injection attacks.