CVE-2026-3980: itsourcecode Online Doctor Appointment System patient_action.php sql injection
A vulnerability has been found in itsourcecode Online Doctor Appointment System 1.0. This impacts an unknown function of the file /admin/patientaction.php. Such manipulation of the argument patientid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3980?
CVE-2026-3980 has been classified as a high-severity SQL injection vulnerability.
How do I fix CVE-2026-3980?
To fix CVE-2026-3980, you should sanitize user input and implement prepared statements in the patient_action.php file.
What software is affected by CVE-2026-3980?
CVE-2026-3980 affects versions of the itsourcecode Online Doctor Appointment System.
What type of vulnerability is CVE-2026-3980?
CVE-2026-3980 is classified as an SQL injection vulnerability that exploits improper handling of user input.
Can CVE-2026-3980 lead to data breaches?
Yes, CVE-2026-3980 can potentially lead to data breaches by allowing attackers to manipulate the database through SQL injection.