CVE-2026-5181: fallo de gravedad media en SourceCodester Simple Doctors Appointment System
SourceCodester Simple Doctors Appointment System ajax.php unrestricted upload
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
33Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 5.3epss 0.2%
A vulnerability has been found in SourceCodester Simple Doctors Appointment System up to 1.0. This issue affects some unknown processing of the file /doctors_appointment/admin/ajax.php?action=save_category. Such manipulation of the argument img leads to unrestricted upload. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
SourceCodester · Simple Doctors Appointment SystemPoCs públicas encontradas — 1
cve_referencegithub.com/dyh1213-wq/cve/issues/5no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — SourceCodester Simple Doctors Appointment System
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-19231MEDIUMSourceCodester Simple Doctors Appointment System ajax.php delete_appointment sql injectionEPSS 0.4%CVE-2026-19839MEDIUMSourceCodester Simple Doctors Appointment System save_file.php save_doctor unrestricted uploadEPSS 0.4%CVE-2026-5180MEDIUMSourceCodester Simple Doctors Appointment System ajax.php sql injectionEPSS 0.3%CVE-2026-19384MEDIUMSourceCodester Simple Doctors Appointment System ajax.php set_appointment sql injectionEPSS 0.3%CVE-2026-5179MEDIUMSourceCodester Simple Doctors Appointment System login.php sql injectionEPSS 0.3%