Multiple SQL Injection Vulnerabilities in HMS v.0 Appointment.php Page

CVE-2022-30012 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.