online-clinic-management-system vulnerabilities

A flaw was found in online-clinic-management-system in doctorlogin.php, where manipulation of the doc_mail/doc_pswd arguments leads to SQL injection. The attack can be executed remotely and a public exploit may already be in use. The project was notified but has not responded.

A vulnerability was detected in subhajitkhan online-clinic-management-system in the file listdoctor.php. Manipulation of the searchtext argument leads to SQL injection. The attack may be initiated remotely and the exploit is publicly available.

SQL injection vulnerability in Online Clinic Management System 1.0, in success/login.php, in the Admin Login component. Manipulation of the Username argument leads to SQL injection. Remote exploitation is possible.