Medium severity5.5NVD Advisory· Published Feb 27, 2023· Updated Jun 17, 2026

CVE-2023-1057

Description

A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been rated as critical. Affected by this issue is the function edoc of the file login.php. The manipulation of the argument usermail leads to sql injection. VDB-221822 is the identifier assigned to this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Doctor\'s Appointment System Project/Doctor\'s Appointment System
cpe:2.3:a:doctors_appointment_system_project:doctors_appointment_system:1.0:*:*:*:*:*:*:*
Sourcecodester/Doctors Appointment Systemllm-fuzzy
Range: <=1.0
Sourcecodester/Simple Doctors Appointment Systemcpe-rescue
Range: 1.0

Patches

Vulnerability mechanics

References

github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%20system%20vlun1.pdfnvdExploitThird Party Advisory
vuldb.comnvdThird Party Advisory
vuldb.comnvdPermissions Required

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000