CVE-2025-3183mediumCWE-74CWE-89

CVE-2025-3183: medium-severity vulnerability in projectworlds Online Doctor Appointment…

projectworlds Online Doctor Appointment Booking System patientupdateprofile.php sql injection

Published · Updated

Follow this CVE+ Monitor Online Doctor Appointment Booking System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.9epss 0.6%
A vulnerability has been found in projectworlds Online Doctor Appointment Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /patient/patientupdateprofile.php. The manipulation of the argument patientFirstName leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
projectworlds · Online Doctor Appointment Booking System
Related CVEs — projectworlds Online Doctor Appointment…

In the same product, most dangerous first.

CVE-2025-3185MEDIUMprojectworlds Online Doctor Appointment Booking System patientupdateprofile.php sql injectionEPSS 0.7%CVE-2025-3182MEDIUMprojectworlds Online Doctor Appointment Booking System getschedule.php sql injectionEPSS 0.7%CVE-2025-3184MEDIUMprojectworlds Online Doctor Appointment Booking System profile.php sql injectionEPSS 0.6%CVE-2025-3181MEDIUMprojectworlds Online Doctor Appointment Booking System appointment.php sql injectionEPSS 0.6%CVE-2025-3180MEDIUMprojectworlds Online Doctor Appointment Booking System deleteschedule.php sql injectionEPSS 0.6%CVE-2025-3179MEDIUMprojectworlds Online Doctor Appointment Booking System deletepatient.php sql injectionEPSS 0.6%