CVE:CVE-2020-29168
CNNVD:CNNVD-202302-1515
Online Doctor Appointment Booking System是开源的一个在线医生预约系统。
Online Doctor Appointment Booking System存在SQL注入漏洞，该漏洞源于允许攻击者通过 getuser.php 端点的 q 参数获取敏感信息。
solution:Upgrade online_doctor_appointment_booking_system_php_and_mysql_project online_doctor_appointment_booking_system_php_and_mysql to a higher version than 1.0,and avoid the version 1.0