Vulnerabilidades do SourceCodester Simple Doctors Appointment System
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam SourceCodester Simple Doctors Appointment System: 3 registro(s), com versões afetadas e correções.
CVE-2026-5181
Média · 6.3
CWE-284 31/03/2026
SourceCodester Simple Doctors Appointment System ajax.php unrestricted upload
A vulnerability has been found in SourceCodester Simple Doctors Appointment System up to 1.0. This issue affects some unknown processing of the file /doctors_appointment/admin/ajax.php?action=save_category. Such manipulation of the argument img leads to unrestricted upload. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
CVE-2026-5180
Alta · 7.3
CWE-74 31/03/2026
SourceCodester Simple Doctors Appointment System ajax.php sql injection
A flaw has been found in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=login2. This manipulation of the argument email causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.
CVE-2026-5179
Alta · 7.3
CWE-74 31/03/2026
SourceCodester Simple Doctors Appointment System login.php sql injection
A vulnerability was detected in SourceCodester Simple Doctors Appointment System 1.0. This affects an unknown part of the file /admin/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.