CVE-2026-116112

HIGH 7.3

HashenUdara edoc-doctor-appointment-system add-new.php sql injection

CVSS Score

7.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to cc258425b915d1af9e298777ccd26d160493e68d. The affected element is an unknown function of the file admin/add-new.php. The manipulation of the argument spec leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.

CWE	CWE-89 CWE-74
Vendor	hashenudara
Product	edoc-doctor-appointment-system
Published	Oct 26, 2026

Stay Ahead of the Next One

Get instant alerts for hashenudara edoc-doctor-appointment-system

Be the first to know when new high vulnerabilities affecting hashenudara edoc-doctor-appointment-system are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

HashenUdara / edoc-doctor-appointment-system

cc258425b915d1af9e298777ccd26d160493e68d

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/426180 vuldb.com: https://vuldb.com/vuln/426180/cti vuldb.com: https://vuldb.com/cve/CVE-2026-116112 vuldb.com: https://vuldb.com/submit/1003917 gist.github.com: https://gist.github.com/asdfghjkl12345678910111/1519ad5b24ad2441cca911ecbfaa9acb

Credits

🔍 hbynb (VulDB User) VulDB CNA Team