https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-3186.htmlhttps://patchthecve.com/cve/CVE-2025-3186.htmlWed, 17 Jun 2026 09:19:22 +0000HIGH 7.3: A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /patient/invoice.php. The manipulation of the argument appid leads to sql injection. The attack can be lauhttps://patchthecve.com/cve/CVE-2025-3185.htmlhttps://patchthecve.com/cve/CVE-2025-3185.htmlWed, 17 Jun 2026 09:19:22 +0000HIGH 7.3: A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. It has been classified as critical. Affected is an unknown function of the file /patient/patientupdateprofile.php. The manipulation of the argument patientFirstName leads to sql injection. It is possible to launhttps://patchthecve.com/cve/CVE-2025-3184.htmlhttps://patchthecve.com/cve/CVE-2025-3184.htmlWed, 17 Jun 2026 09:19:22 +0000HIGH 7.3: A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0 and classified as critical. This issue affects some unknown processing of the file /patient/profile.php?patientId=1. The manipulation of the argument patientFirstName leads to sql injection. The attack may be inihttps://patchthecve.com/cve/CVE-2025-3183.htmlhttps://patchthecve.com/cve/CVE-2025-3183.htmlWed, 17 Jun 2026 09:19:22 +0000HIGH 7.3: A vulnerability has been found in projectworlds Online Doctor Appointment Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /patient/patientupdateprofile.php. The manipulation of the argument patientFirstName leads to sql injection. The attack can be https://patchthecve.com/cve/CVE-2025-3182.htmlhttps://patchthecve.com/cve/CVE-2025-3182.htmlWed, 17 Jun 2026 09:19:22 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in projectworlds Online Doctor Appointment Booking System 1.0. This affects an unknown part of the file /patient/getschedule.php. The manipulation of the argument q leads to sql injection. It is possible to initiate the attack remotely. Thhttps://patchthecve.com/cve/CVE-2025-3181.htmlhttps://patchthecve.com/cve/CVE-2025-3181.htmlWed, 17 Jun 2026 09:19:22 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in projectworlds Online Doctor Appointment Booking System 1.0. Affected by this issue is some unknown functionality of the file /patient/appointment.php?scheduleDate=1&appid=1. The manipulation of the argument scheduleDate leads to sq