Unknown · Online Appointment Booking System · CVE-2025-14939
**Name of the Vulnerable Software and Affected Versions**
Online Appointment Booking System version 1.0
**Description**
A flaw exists in the Online Appointment Booking System that allows for SQL injection. The issue is located in the `/admin/deletemanager.php` file, specifically through manipulation of the `managername` argument. This allows for remote exploitation. The details of the exploit have been publicly disclosed.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.