GHSA-r6h4-5497-c694: SQL injection vulnerability in edoc-doctor-appointment-system
A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to cc258425b915d1af9e298777ccd26d160493e68d. Manipulation of the spec argument in an unknown function in admin/add-new.php can lead to SQL injection. The attack can be initiated remotely. A public exploit is available and might be used.
CERT24