PT-2026-26566 · Itsourcecode · Online Doctor Appointment System

Onechicken · Published 2026-03-20 · Updated 2026-03-20 · CVE-2026-4473

NVD

CVSS v2.0

5.8

Medium

AV:N/AC:L/Au:M/C:P/I:P/A:P

A vulnerability was detected in itsourcecode Online Doctor Appointment System 1.0. This issue affects some unknown processing of the file /admin/appointment action.php. The manipulation of the argument appointment id results in sql injection. The attack can be launched remotely. The exploit is now public and may be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-4473

Affected Products

Online Doctor Appointment System

References · 6

• 🔥 https://github.com/sjkdhl/public/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4473 · Security Note
• https://vuldb.com/?submit.772883 · Note
• https://vuldb.com/?id.351763 · Note
• https://vuldb.com/?ctiid.351763 · Note
• https://itsourcecode.com · Note