CVE-2026-19231: SourceCodester Simple Doctors Appointment System ajax.php delete_appointment sql injection
Published Aug 7, 2026
·Updated
A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=deleteappointment. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
1 affected component
Sourcecodester Simple Doctors Appointment System=1.0
Event History
Aug 7, 2026
CVE Published
via MITRE·06:30 PM
Data Sourced
via MITRE·06:30 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-19231?
The severity of CVE-2026-19231 is rated as high at 7.3.
2
How do I fix CVE-2026-19231?
To fix CVE-2026-19231, you should sanitize inputs to prevent SQL injection in the affected ajax.php file.
3
What systems are affected by CVE-2026-19231?
CVE-2026-19231 affects SourceCodester Simple Doctors Appointment System version 1.0.
4
What type of vulnerability is CVE-2026-19231?
CVE-2026-19231 is an SQL injection vulnerability.
5
Can CVE-2026-19231 be exploited remotely?
Yes, CVE-2026-19231 can be exploited remotely, allowing unauthorized access to the database.