VULNERABLE: SQL Injection in Hospital-Management-System. SQL injection in Hospital-Management-System/patientsearch.php via the 'patient_contact' param

[namnhat239]

I found an SQL Injection in your project
Pls Follow these steps to reproduce:

1. Create a request to 'patientsearch.php':
   
2. Save this request to 1.txt file:
   
3. Run SQLMap for the attack:
   sqlmap -r 1.txt --dbs
   
4. Area of concern in patientsearch.php