Cpe:2.3:a:anisha:online_appointment_booking_system:1.0:*:*:*:*:*:*:*

A public proof-of-concept exploit exists for an unauthenticated, time-based SQL injection vulnerability in the username parameter of the /admin/adddoctor.php endpoint in Online Appointment Booking System 1.0.