Cpe:2.3:a:anisha:online_appointment_booking_system:1.0:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3aanishaonline_appointment_booking_system1.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 09 Nov 2026 13:35:09 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgOnline Appointment Booking System 1.0: Unauthenticated SQL Injection (CVE-2025-7753)https://feed.craftedsignal.io/briefs/2026-11-cve-2025-7753/Mon, 09 Nov 2026 13:35:09 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-cve-2025-7753/A public proof-of-concept exploit exists for an unauthenticated, time-based SQL injection vulnerability in the username parameter of the /admin/adddoctor.php endpoint in Online Appointment Booking System 1.0.<p>An unauthenticated, time-based SQL injection vulnerability (CVE-2025-7753) has been identified in version 1.0 of the Online Appointment Booking System. The vulnerability resides in the 'username' parameter of the '/admin/adddoctor.php' file. Public proof-of-concept exploit code is available, which utilizes libcurl on Linux systems to execute SQL queries. The vulnerability is rated with a CVSS score of 9.8 (Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).</p> highadvisory