Cpe:2.3:a:hashenudara:edoc-Doctor-Appointment-System:*:*:*:*:*:*:*:*

A SQL injection vulnerability exists in the admin/add-new.php file of the edoc-doctor-appointment-system via the spec parameter.