Product
A public proof-of-concept exploit exists for an unauthenticated, time-based SQL injection vulnerability in the username parameter of the /admin/adddoctor.php endpoint in Online Appointment Booking System 1.0.