| عنوان | SourceCodester Simple Doctor's Appointment System using PHP/MySQL with Source Code /doctors/admin/ajax.php?action=save_doctor 1.0 Unrestricted Upload |
|---|
| الوصف | A vulnerability, which was classified as critical, was found in sourcecodester Simple Doctor's Appointment System 1.0. This affects some
unknown functionality of the file /save_file.php . The manipulation of the argument with an unknown input leads to a unrestricted upload vulnerability. The product allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. This is going to have an impact on confidentiality, integrity, and availability.User can update file through /doctors/admin/ajax.php?action=save_doctor
Web application doesn't sanitize or filters the being uploaded, making it vulnerable to arbitrary file upload vulnerability, that can also lead to Remote Code Execution. |
|---|
| المصدر | ⚠️ https://github.com/HZFW2026/cve/issues/3 |
|---|
| المستخدم | HZFW2026 (UID 99057) |
|---|
| ارسال | 26/06/2026 07:40 AM (2 أشهر منذ) |
|---|
| الاعتدال | 14/08/2026 09:57 AM (2 months later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 389977 [SourceCodester Simple Doctors Appointment System 1.0 /save_file.php save_doctor تجاوز الصلاحيات] |
|---|
| النقاط | 20 |
|---|