CVE:CVE-2022-43227
CNNVD:CNNVD-202211-1953
Online Diagnostic Lab Management System是在线诊断实验室管理系统。
Online Diagnostic Lab Management System v1.0版本存在SQL注入漏洞，攻击者利用该漏洞可以通过 /odlms/admin/?page=appointments/view_appointment 的 id 参数可以进行SQL注入。
solution:Upgrade online_diagnostic_lab_management_system_project online_diagnostic_lab_management_system to a higher version than 1.0,and avoid the version 1.0