CVE-2025-3181
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Apr 3, 2025
Updated: Apr 15, 2025
CWE ID 74
CWE ID 89
Summary
CVE-2025-3181 is a critical vulnerability identified in the projectworlds Online Doctor Appointment Booking System 1.0. This issue affects an unknown functionality of the file /patient/appointment.php, specifically the scheduleDate argument. By manipulating this argument, an attacker can carry out SQL injection, potentially gaining unauthorized access to sensitive data or even taking control of the system. The exploit for this vulnerability has been made public, increasing the risk of remote attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.