Online Clinic Management System CVE-2026-115247

Exploitation targets the pat_pswd/doc_pswd password parameters handled by patientregistration.php, where sensitive credential data is not properly encrypted (CWE-311). Per the CVSS 4.0 vector, the attacker needs a low-privilege authenticated account (PR:L) and network access (AV:N) with no user interaction; this authentication requirement is the primary limiting factor. The available sources do not describe the concrete trigger (whether the weakness is unencrypted storage or transmission of the password values), so the exact precondition beyond having a valid low-privilege account cannot be confirmed from the provided data. Real-world exploitation is further constrained by the product's negligible deployment footprint and the absence of a verified working exploit.

This is a low-to-moderate severity issue (vendor CVSS 4.0 base 5.3) that does not warrant emergency handling. The CVSS 4.0 vector AV:N/AC:L/AT:N/PR:L/UI:N indicates a network-reachable flaw requiring low privileges (an authenticated account) and no user interaction, but impact is limited to confidentiality (VC:L) with no integrity or availability effect - consistent with CWE-311 (missing encryption of sensitive data) rather than code execution or full data compromise. The E:P (Proof-of-Concept) exploit maturity aligns with the input noting a PoC reference that is not verified as working exploit code. There is no CISA KEV listing and no EPSS score was provided, so there is no signal of active or widespread exploitation; VulDB/vuln.today assign a 'this_month' priority rather than act_now or emergency. A material limiting factor is the product itself: an obscure open-source GitHub clinic-management project with no evident enterprise footprint, which sharply reduces real-world risk regardless of the network vector. Note the evidence does not describe the trigger mechanism beyond 'manipulation of the argument pat_pswd/doc_pswd,' so the precise exposure path (cleartext storage vs. cleartext transmission) is not confirmed and should be verified against the source code or issue report.

An authenticated user of the clinic system (patient or doctor account) interacts with patientregistration.php where the pat_pswd/doc_pswd password values are handled without proper encryption, allowing sensitive credential data to be exposed - for example recovered from storage or observed in transit. A public PoC reference exists (the GitHub issue report), but it is not verified as working exploit code, and the attack is reachable remotely over the network. The low-privilege requirement (PR:L) means an attacker needs some valid account rather than fully unauthenticated access.