CVE:CVE-2023-1151
CNNVD:CNNVD-202303-162
Electronic Medical Records System是一个电子病历系统。
SourceCodester Electronic Medical Records System 1.0版本存在SQL注入漏洞，该漏洞源于对参数userid的错误操作导致sql注入。
solution:Upgrade electronic_medical_records_system_project electronic_medical_records_system to a higher version than 1.0,and avoid the version 1.0