PT-2026-27284 · Sourcecodester · Patients Waiting Area Queue Management System

Abhiram T · Publicado 2026-03-24 · Atualizado 2026-03-25 · CVE-2026-4617

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SourceCodester Patients Waiting Area Queue Management System version 1.0

Description A flaw exists in the Patient Check-In Module of the software, specifically within the ValidateToken function located in the /php/api patient checkin.php file. This can result in improper authorization, allowing remote attacks. The exploit for this issue is publicly available.

Recommendations Apply any available updates to address the improper authorization issue in the ValidateToken function of the /php/api patient checkin.php file. As a temporary workaround, consider restricting access to the Patient Check-In Module to minimize the risk of exploitation.

Exploit

Correção

Improper Authorization

Incorrect Privilege Assignment

Enumeração de Fraquezas

CWE-285

CWE-266

Identificadores relacionados

CVE-2026-4617

Produtos afetados

Patients Waiting Area Queue Management System

Referências · 9

• 🔥 https://gist.github.com/HxH404/0ab53ccba44456b5400a5908414f5ab1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4617 · Nota de Segurança
• https://twitter.com/cyberbivash/status/2036263020641255683 · Publicação no Twitter
• https://vuldb.com/?ctiid.352481 · Nota
• https://vuldb.com/?id.352481 · Nota
• https://vuldb.com/?submit.775747 · Nota
• https://twitter.com/RedPacketSec/status/2036319788654354781 · Publicação no Twitter
• https://twitter.com/CVEarity/status/2036848629017878592 · Publicação no Twitter
• https://sourcecodester.com · Nota