CVE-2026-5180: SourceCodester Simple Doctors Appointment System ajax.php sql injection
A flaw has been found in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=login2. This manipulation of the argument email causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5180?
CVE-2026-5180 is considered a critical vulnerability due to its potential for SQL injection, which can lead to unauthorized access and data manipulation.
How do I fix CVE-2026-5180?
To fix CVE-2026-5180, sanitize and validate user inputs in the ajax.php file, specifically for the login function to prevent SQL injection.
What systems are affected by CVE-2026-5180?
CVE-2026-5180 affects SourceCodester Simple Doctors Appointment System version 1.0.
What type of vulnerability is CVE-2026-5180?
CVE-2026-5180 is a SQL injection vulnerability, allowing attackers to manipulate database queries through crafted inputs.
Is CVE-2026-5180 being actively exploited?
As of now, there have been reports indicating that CVE-2026-5180 could be exploited in the wild, making it critical to apply patches immediately.