A vulnerability was detected in SourceCodester Simple Doctors Appointment System 1.0. This issue affects the function save_doctor of the file /save_file.php. The manipulation results in unrestricted upload. The attack can be executed remotely. The exploit is now public and may be...
Product
sourcecodester Simple Doctors Appointment System vulnerabilities
6 published CVES affecting sourcecodester Simple Doctors Appointment System, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 6
- Critical
- 0
- High
- 0
- Medium
- 6
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest sourcecodester Simple Doctors Appointment System CVEs
Newest publication first
-
MediumCVSS 5.1 EPSS 0.40%
-
MediumCVSS 6.9 EPSS 0.32%
A weakness has been identified in SourceCodester Simple Doctors Appointment System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=set_appointment. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely....
-
MediumCVSS 6.9 EPSS 0.43%
A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=delete_appointment. The manipulation of the argument ID results in sql injection. The attack may be launched rem...
-
CVE-2026-5181 SourceCodester Simple Doctors Appointment System ajax.php unrestricted upload
PublishedMediumCVSS 5.3 EPSS 0.21%A vulnerability has been found in SourceCodester Simple Doctors Appointment System up to 1.0. This issue affects some unknown processing of the file /doctors_appointment/admin/ajax.php?action=save_category. Such manipulation of the argument img leads to unrestricted upload. The a...
-
MediumCVSS 6.9 EPSS 0.33%
A flaw has been found in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=login2. This manipulation of the argument email causes sql injection. The attack is possible to be carried out remotely. The e...
-
MediumCVSS 6.9 EPSS 0.26%
A vulnerability was detected in SourceCodester Simple Doctors Appointment System 1.0. This affects an unknown part of the file /admin/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.