CVE-2026-4473: itsourcecode Online Doctor Appointment System appointment_action.php sql injection
A vulnerability was detected in itsourcecode Online Doctor Appointment System 1.0. This issue affects some unknown processing of the file /admin/appointmentaction.php. The manipulation of the argument appointmentid results in sql injection. The attack can be launched remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4473?
CVE-2026-4473 has a high severity rating due to its potential for SQL injection exploitation.
How do I fix CVE-2026-4473?
To fix CVE-2026-4473, sanitize and parameterize all SQL queries in the appointment_action.php file.
Who is affected by CVE-2026-4473?
CVE-2026-4473 affects users of the itsourcecode Online Doctor Appointment System version 1.0.
What type of vulnerability is CVE-2026-4473?
CVE-2026-4473 is an SQL injection vulnerability that allows attackers to manipulate database queries.
What file is vulnerable in CVE-2026-4473?
The vulnerable file in CVE-2026-4473 is /admin/appointment_action.php.