Description
In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection.
Unscored
CVE-2022-30012
EUVD-2022-35227GHSA-h8p9-8p5m-2m7h
In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database in…
Published May 16, 2022 · Updated Aug 3, 2024 · Assigned by mitre