CVE-2026-112093: falha de média gravidade em subhajitkhan online-clinic-management-system
subhajitkhan online-clinic-management-system feedback.php cross site scripting
Publicada em
33Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 5.3epss 0.3%
probabilidade de exploração
0.3%top 80% das CVEs
exploração observada
nãonenhuma fonte reporta
1 exploit(s) público(s)
A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The impacted element is an unknown function of the file feedback.php. The manipulation of the argument msg leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Produtos afetados
subhajitkhan · online-clinic-management-systemPoCs públicas encontradas — 1
cve_referencegithub.com/subhajitkhan/online-clinic-management-system/issues/7não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — subhajitkhan online-clinic-management-system
No mesmo produto, das mais perigosas para as menos.
CVE-2026-90858MEDIUMsubhajitkhan online-clinic-management-system adminappview.php session_start authorizationEPSS 0.5%CVE-2026-90805MEDIUMsubhajitkhan online-clinic-management-system doctorlogin.php sql injectionEPSS 0.4%CVE-2026-90701MEDIUMsubhajitkhan online-clinic-management-system listdoctor.php sql injectionEPSS 0.4%CVE-2026-112092MEDIUMsubhajitkhan online-clinic-management-system Doctor Registration doctorregistration.php echo cross site scriptingEPSS 0.3%CVE-2026-112139MEDIUMsubhajitkhan online-clinic-management-system Administrative Mutation admindocview.php sql injectionEPSS 0.3%CVE-2026-116482MEDIUMsubhajitkhan online-clinic-management-system patientregistration.php cross site scriptingEPSS 0.3%