CVE-2026-5181 in Simple Doctors Appointment System

Resumen (Inglés)

A vulnerability has been found in SourceCodester Simple Doctors Appointment System up to 1.0. This issue affects some unknown processing of the file /doctors_appointment/admin/ajax.php?action=save_category. Such manipulation of the argument img leads to unrestricted upload. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Divulgación

2026-03-31

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
354249	SourceCodester Simple Doctors Appointment System ajax.php escalada de privilegios	434	Prueba de concepto	No está definido	CVE-2026-5181

Fuentes

• MITRE
• NVD
• CVE Details