CVE-2026-5181 in SourceCodester Simple Doctors Appointment System
要約 (英語)
A vulnerability has been found in SourceCodester Simple Doctors Appointment System up to 1.0. This issue affects some unknown processing of the file /doctors_appointment/admin/ajax.php?action=save_category. Such manipulation of the argument img leads to unrestricted upload. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
公開
2026年03月31日
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 354249 | SourceCodester Simple Doctors Appointment System ajax.php 特権昇格 | 434 | 概念実証 | 未定義 | CVE-2026-5181 |