Online Doctor Appointment System

2 CVEs product

Monthly

CVE-2026-3981 HIGH This Week

SQL injection in itsourcecode Online Doctor Appointment System 1.0 allows unauthenticated remote attackers to manipulate the ID parameter in /admin/doctor_action.php, potentially gaining unauthorized access to sensitive data and modifying database records. Public exploit code exists for this vulnerability, and no patch is currently available.

PHP SQLi Online Doctor Appointment System
NVD GitHub VulDB
CVSS 3.1
7.3
EPSS
0.0%
CVE-2026-3980 HIGH This Week

SQL injection in the Online Doctor Appointment System 1.0 admin panel allows unauthenticated remote attackers to manipulate the patient_id parameter and execute arbitrary database queries. The vulnerability affects the /admin/patient_action.php file and enables attackers to compromise data confidentiality, integrity, and availability. Public exploit code exists for this vulnerability, and no patch is currently available.

PHP SQLi Online Doctor Appointment System
NVD GitHub VulDB
CVSS 3.1
7.3
EPSS
0.0%
CVE-2026-3981
EPSS 0% CVSS 7.3
HIGH This Week

SQL injection in itsourcecode Online Doctor Appointment System 1.0 allows unauthenticated remote attackers to manipulate the ID parameter in /admin/doctor_action.php, potentially gaining unauthorized access to sensitive data and modifying database records. Public exploit code exists for this vulnerability, and no patch is currently available.

PHP SQLi Online Doctor Appointment System
NVD GitHub VulDB
CVE-2026-3980
EPSS 0% CVSS 7.3
HIGH This Week

SQL injection in the Online Doctor Appointment System 1.0 admin panel allows unauthenticated remote attackers to manipulate the patient_id parameter and execute arbitrary database queries. The vulnerability affects the /admin/patient_action.php file and enables attackers to compromise data confidentiality, integrity, and availability. Public exploit code exists for this vulnerability, and no patch is currently available.

PHP SQLi Online Doctor Appointment System
NVD GitHub VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy