Online-Appointment-Booking-System (Up to Commit F427b4757128ca253d33d0cc4e87bbb9c999a4d5)

An unauthenticated SQL injection vulnerability in the Patient Login Handler allows remote attackers to execute arbitrary SQL commands via the uname or psw parameters.