In Hospital-Management-System v1.0, the editid parameter in the doctor.php page is vulnerable to SQL injection attacks.

Published May 26, 2022 · Updated Aug 3, 2024 · Assigned by mitre