PT-2026-27284 · Sourcecodester · Patients Waiting Area Queue Management System

Abhiram T · Published 2026-03-24 · Updated 2026-03-24 · CVE-2026-4617

NVD

CVSS v2.0

7.5

High

AV:N/AC:L/Au:N/C:P/I:P/A:P

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is the function ValidateToken of the file /php/api patient checkin.php of the component Patient Check-In Module. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.

Exploit

Fix

Incorrect Privilege Assignment

Improper Authorization

Weakness Enumeration

CWE-266

CWE-285

Related Identifiers

CVE-2026-4617

Affected Products

Patients Waiting Area Queue Management System

References · 6

• 🔥 https://gist.github.com/HxH404/0ab53ccba44456b5400a5908414f5ab1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4617 · Security Note
• https://vuldb.com/?submit.775747 · Note
• https://vuldb.com/?id.352481 · Note
• https://sourcecodester.com · Note
• https://vuldb.com/?ctiid.352481 · Note