---
id: CVE-2025-50455
title: >-
  SQL injection vulnerability exists in the order_by parameter of the
  /customers/search endpoint in Alex Tselegidis EasyAppointments <= 1.5.1
summary: >-
  SQL injection vulnerability exists in the order_by parameter of the
  /customers/search endpoint in Alex Tselegidis EasyAppointments <= 1.5.1. The
  vulnerability arises from unsanitized user input passed to the order_by method
  of the CodeIg…
severity: critical
cvss: 9.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N'
cwe:
  - CWE-89
published: '2026-07-27'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T10:10:00.193'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-50455'
references:
  - url: >-
      https://github.com/threatlance-org/security-advisories/blob/main/CVE-2025-50455/advisory.md
    label: cve@mitre.org
  - url: >-
      https://github.com/threatlance-org/security-advisories/blob/main/CVE-2025-50455/poc.py
    label: cve@mitre.org
  - url: >-
      https://www.linkedin.com/posts/michael-chesang_cve-securityadvisory-appsec-activity-7360754900827365376-Z-IY
    label: cve@mitre.org
  - url: >-
      https://github.com/threatlance-org/security-advisories/blob/main/CVE-2025-50455/advisory.md
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
  - exploit-available
epss: 0.01249
epssPercentile: 0.68558
exploits:
  exploitdb: true
  checkedAt: '2026-10-13T10:22:37.869Z'
exploitAvailable: true
ingestedAt: '2026-10-13T10:22:03.549Z'
---

## Overview

SQL injection vulnerability exists in the order_by parameter of the /customers/search endpoint in Alex Tselegidis EasyAppointments <= 1.5.1. The vulnerability arises from unsanitized user input passed to the order_by method of the CodeIgniter Query Builder, enabling attackers to perform time-based queries and schema enumeration. Under certain MySQL configurations, the flaw may lead to remote code execution by writing a PHP shell using INTO OUTFILE.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.