Skip to content
Threat Feed
Subscribe

Vendor

Subhajitkhan

2 briefs RSS
high advisory

SQL Injection Vulnerability in Online Clinic Management System

An unauthenticated SQL injection vulnerability in the Administrative Mutation Handler of the Online Clinic Management System allows remote attackers to execute arbitrary database queries via the docid parameter.

online-clinic-management-system sql-injection vulnerability web-application
1r 1t 1c
high advisory

SQL Injection in online-clinic-management-system

An unauthenticated SQL injection vulnerability (CVE-2026-90701) in the online-clinic-management-system allows remote attackers to manipulate database queries via the listdoctor.php searchtext parameter.

online-clinic-management-system web-application sql-injection vulnerability
2r 1t 1c updated