CVE-2025-14939

MEDIUM

Anisha Online Appointment Booking System - Injection

Title source: rule

Description

A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the file /admin/deletemanager.php. The manipulation of the argument managername results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.

References (5)

Scores

CVSS v3 4.7
EPSS 0.0003
EPSS Percentile 10.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Classification

CWE
CWE-74 CWE-89
Status published

Affected Products (1)

anisha/online_appointment_booking_system

Timeline

Published Dec 19, 2025
Tracked Since Feb 18, 2026