CVE-2026-5179

HIGH CVSS 7.3 View on NVD ↗

Description

A vulnerability was detected in SourceCodester Simple Doctors Appointment System 1.0. This affects an unknown part of the file /admin/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

References

https://github.com/dyh1213-wq/cve/issues/3
https://vuldb.com/submit/780353
https://vuldb.com/vuln/354247
https://vuldb.com/vuln/354247/cti
https://www.sourcecodester.com/

Published: Mar 31, 2026 05:16 UTC Modified: Mar 31, 2026 05:16 UTC