Doctor Appointment System 1.0 - SQL Injection

披露于 2021/02/18 · 更新于 2025/08/01

CVSS 评分6.5/ 10.0

EPSS 概率22.3%百分位 95.5%

漏洞描述

SQL injection in the expertise parameter in search_result.php in Doctor Appointment System v1.0.

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 doctor_appointment_system 相关的其他公开漏洞。

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2021-27320 Doctor Appointment System 1.0 - SQL Injection doctor_appointment_system	高危	7.5	76.2%	PoCEXP	2021/03/25
CVE-2021-27319 Doctor Appointment System 1.0 - SQL Injection doctor_appointment_system	高危	7.5	72.2%	PoCEXP	2021/03/25
CVE-2021-27316 Doctor Appointment System 1.0 - SQL Injection doctor_appointment_system	高危	7.5	71.4%	PoCEXP	2021/03/25
CVE-2021-27315 Doctor Appointment System 1.0 - SQL Injection doctor_appointment_system	高危	7.5	71.4%	PoCEXP	2021/03/25
CVE-2021-27314 Doctor Appointment System 1.0 - SQL Injection doctor_appointment_system	严重	9.8	78.7%	PoCEXP	2021/03/05