PT-2026-29194 · Sourcecodester · Simple Doctors Appointment System

Dyh18 · Published 2026-03-31 · Updated 2026-03-31 · CVE-2026-5181

NVD

CVSS v2.0

6.5

Medium

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability has been found in SourceCodester Simple Doctors Appointment System up to 1.0. This issue affects some unknown processing of the file /doctors appointment/admin/ajax.php?action=save category. Such manipulation of the argument img leads to unrestricted upload. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

Exploit

Fix

Improper Access Control

Unrestricted File Upload

Weakness Enumeration

CWE-284

CWE-434

Related Identifiers

CVE-2026-5181

Affected Products

Simple Doctors Appointment System

References · 6

• 🔥 https://github.com/dyh1213-wq/cve/issues/5 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5181 · Security Note
• https://vuldb.com/vuln/354249/cti · Note
• https://vuldb.com/submit/780375 · Note
• https://vuldb.com/vuln/354249 · Note
• https://sourcecodester.com · Note