PT-2026-29190 · Sourcecodester · Simple Doctors Appointment System

Dyh18 · Published 2026-03-31 · Updated 2026-03-31 · CVE-2026-5180

NVD

CVSS v2.0

7.5

High

AV:N/AC:L/Au:N/C:P/I:P/A:P

A flaw has been found in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=login2. This manipulation of the argument email causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-5180

Affected Products

Simple Doctors Appointment System

References · 7

• 🔥 http://github.com/dyh1213-wq/cve/issues/4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5180 · Security Note
• https://vuldb.com/vuln/354248 · Note
• https://twitter.com/cyberbivash/status/2038850621982253253 · Twitter Post
• https://vuldb.com/vuln/354248/cti · Note
• https://vuldb.com/submit/780354 · Note
• https://sourcecodester.com · Note