Security Advisory
CVE-2025-64081
9.8
CRITICAL
Vulnerability Description
SQL injection vulnerability in /php/api_patient_schedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter.
Published Date
December 8, 2025
Official Source
NIST NVD Advisory