CVE-2025-7540: SQL Injection in code-projects Online Appointment Booking System
A vulnerability, which was classified as critical, was found in code-projects Online Appointment Booking System 1.0. Affected is an unknown function of the file /getclinic.php. The manipulation of the argument townid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
CVE-2025-7540: SQL Injection in code-projects Online Appointment Booking System
Description
A vulnerability, which was classified as critical, was found in code-projects Online Appointment Booking System 1.0. Affected is an unknown function of the file /getclinic.php. The manipulation of the argument townid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- VulDB
- Date Reserved
- 2025-07-12T11:38:42.208Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6874140da83201eaacbe268c
Added to database: 7/13/2025, 8:16:13 PM
Last updated: 7/13/2025, 8:16:13 PM
Views: 1
Related Threats
CVE-2025-7539: SQL Injection in code-projects Online Appointment Booking System
MediumCVE-2025-53865: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in roundup-tracker Roundup
MediumCVE-2025-7538: Unrestricted Upload in Campcodes Sales and Inventory System
MediumCVE-2025-7537: SQL Injection in Campcodes Sales and Inventory System
MediumCVE-2025-7536: SQL Injection in Campcodes Sales and Inventory System
MediumActions
Need enhanced features?
Contact root@offseq.com for Pro access with improved analysis and higher rate limits.