Login Request a demo
Medium severity · published Oct 22, 2026
CVE-2026-115249
subhajitkhan online-clinic-management-system Appointment Booking patappointtime.php input validation
New
4.6
CVSS
0.2%
EPSS
No
On KEV
Description
A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Impacted is an unknown function of the file patappointtime.php of the component Appointment Booking. This manipulation of the argument day/time/appdate causes improper input validation. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
None
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ON
online-clinic-management-system · subhajitkhan
e9ee77a8827a1446220fa07ee693dc4d9a29a578 · source: vendor
Affected product
ON
online-clinic-management-system
subhajitkhan
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-115249
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-115249
github.com
https://github.com/subhajitkhan/online-clinic-management-system/
github.com
https://github.com/subhajitkhan/online-clinic-management-system/issues/11
vuldb.com
https://vuldb.com/cve/CVE-2026-115249
vuldb.com
https://vuldb.com/submit/1021724
vuldb.com
https://vuldb.com/vuln/425222
vuldb.com
https://vuldb.com/vuln/425222/cti
More from online-clinic-management-system
7.3
CVE-2026-112139
subhajitkhan online-clinic-management-system Administrative Mutation admindocview.php sql injection
7.3
CVE-2026-90858
subhajitkhan online-clinic-management-system adminappview.php session_start authorization
7.3
CVE-2026-90805
subhajitkhan online-clinic-management-system doctorlogin.php sql injection
7.3
CVE-2026-90701
subhajitkhan online-clinic-management-system listdoctor.php sql injection
5.4
CVE-2026-115248
subhajitkhan online-clinic-management-system Booking patappointtime.php behavioral workflow