Vulnerability Details CVE-2025-64081
SQL injection vulnerability in /php/api_patient_schedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter.
Exploit prediction scoring system (EPSS) score
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2025-64081
-
cpe:2.3:a:pamzey:patients_waiting_area_queue_management_system:1.0