CVE-2025-50455
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
SQL injection vulnerability in the order_by parameter of the /customers/search endpoint in Alex Tselegidis EasyAppointments <= 1.5.1. Unsanitized user input passed to the CodeIgniter Query Builder's order_by method allows time-based queries and schema enumeration. Under certain MySQL configurations, it may lead to remote code execution via writing a PHP shell using INTO OUTFILE.
Risk Assessment
This can allow attackers to extract database data and, under favorable conditions, achieve remote code execution on the server.
Recommendation
Upgrade EasyAppointments to a version above 1.5.1 and use parameterized SQL queries instead of direct input concatenation.
Original NVD description (English source)
SQL injection vulnerability exists in the order_by parameter of the /customers/search endpoint in Alex Tselegidis EasyAppointments <= 1.5.1. The vulnerability arises from unsanitized user input passed to the order_by method of the CodeIgniter Query Builder, enabling attackers to perform time-based queries and schema enumeration. Under certain MySQL configurations, the flaw may lead to remote code execution by writing a PHP shell using INTO OUTFILE.