Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-19231 1 Sourcecodester 1 Simple Doctors Appointment System 2026-08-07 7.3 High
A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=delete_appointment. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
CVE-2026-5181 1 Sourcecodester 1 Simple Doctors Appointment System 2026-04-24 6.3 Medium
A vulnerability has been found in SourceCodester Simple Doctors Appointment System up to 1.0. This issue affects some unknown processing of the file /doctors_appointment/admin/ajax.php?action=save_category. Such manipulation of the argument img leads to unrestricted upload. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.