CVE-2023-39852
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk52th percentile - higher than 52% of all known CVEs
Summary
Doctormms v1.0 was discovered to contain a SQL injection vulnerability via the $userid parameter at myAppoinment.php. There is a dispute regarding whether the userid is a session variable controlled by the server.
Risk Assessment
This vulnerability could lead to unauthorized access to the database, posing a serious threat to the organization's data security.
Recommendation
It is recommended to review and improve the code to secure against SQL injections and to verify that session variables are properly controlled.
Original NVD description (English source)
Doctormms v1.0 was discovered to contain a SQL injection vulnerability via the $userid parameter at myAppoinment.php. NOTE: this is disputed by a third party who claims that the userid is a session variable controlled by the server, and thus cannot be used for exploitation. The original reporter counterclaims that this originates from $_SESSION["userid"]=$_POST["userid"] at line 68 in doctors\doctorlogin.php, where userid under POST is not a session variable controlled by the server.