Description
SQL injection vulnerability in /php/api_patient_schedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter.
Critical · 9.8
CVE-2025-64081
EUVD-2025-201798GHSA-6c92-mc4q-93c3
SQL injection vulnerability in /php/api_patient_schedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows atta…
Published Dec 8, 2025 · Updated Dec 8, 2025 · Assigned by mitre