CVE-2021-27124: Doctor Appointment System Project Doctor Appointment System

Medium severity, CVSS 6.5. EPSS: 5.8% chance of exploitation in the next 30 days.

SQL injection in the expertise parameter in search_result.php in Doctor Appointment System v1.0 allows an authenticated patient user to dump the database credentials via a SQL injection attack.

Affected products

• Doctor Appointment System Project Doctor Appointment System: version 1.0 only

Published 2021-02-18. Last modified 2026-06-17.