Unrated severityNVD Advisory· Published Feb 17, 2023· Updated Mar 19, 2025

CVE-2020-29168

Description

SQL Injection vulnerability in Projectworlds Online Doctor Appointment Booking System, allows attackers to gain sensitive information via the q parameter to the getuser.php endpoint.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Projectworlds/Online Doctor Appointment Booking Systemdescription
Anisha/Online Appointment Booking Systemllm-fuzzy

Patches

Vulnerability mechanics

References

projectworlds.in/free-projects/php-projects/online-doctor-appointment-booking-system-php-and-mysql/%2Cmitre
projectworlds.in/wp-content/uploads/2020/05/PHP-Doctor-Appointment-System.zipmitre
www.exploit-db.com/exploits/49059mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000