Cpe:2.3:a:girishsaraf:online_appointment_booking_system:*:*:*:*:*:*:*:*

An unauthenticated SQL injection vulnerability in the Patient Login Handler allows remote attackers to execute arbitrary SQL commands via the uname or psw parameters.