Critical severity9.8NVD Advisory· Published Feb 17, 2023· Updated Jun 17, 2026

CVE-2020-29168

Description

SQL Injection vulnerability in Projectworlds Online Doctor Appointment Booking System, allows attackers to gain sensitive information via the q parameter to the getuser.php endpoint.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Online Doctor Appointment Booking System PHP And Mysql Project/Online Doctor Appointment Booking System PHP And Mysql
cpe:2.3:a:online_doctor_appointment_booking_system_php_and_mysql_project:online_doctor_appointment_booking_system_php_and_mysql:1.0:*:*:*:*:*:*:*
Projectworlds/Online Doctor Appointment Booking Systemdescription
Projectworlds/Online Doctor Appointment Booking Systemllm-create

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/49059nvdExploitThird Party AdvisoryVDB Entry
projectworlds.in/wp-content/uploads/2020/05/PHP-Doctor-Appointment-System.zipnvdProduct
projectworlds.in/free-projects/php-projects/online-doctor-appointment-booking-system-php-and-mysql/%2Cnvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000