CNNVD-202601-3067 Information

CNNVD ID

CNNVD-202601-3067

CVE-2026-1147

  • CNNVD Published: 2026-01-19

Description (Chinese)

SourceCodester Patients Waiting Area Queue Management System是SourceCodester开源的一个病人候诊区排队管理系统。 SourceCodester Patients Waiting Area Queue Management System 1.0版本存在代码注入漏洞,该漏洞源于对文件/php/api_patient_schedule.php中参数Reason的错误操作,可能导致跨站脚本攻击。

Description (English)

ServiceCodester Patients Waiting Area Queue Management System is a waiting area management system for patients from the Open Source of ServiceCodester. SourceCodesterPatients Waiting Area Queue Management System Version 1.0 contains a code-in-code loophole resulting from an error in the argument Reason in the file/php/api patient schedule.php, which may result in a cross-site script attack.

Hazard Level

Critical

Vulnerability Type

代码注入

Affected Vendor

SourceCodester

Published

2026-01-19

Last Modified

2026-02-24

References

https://vuldb.com/?ctiid.341740 https://vuldb.com/?id.341740 https://vuldb.com/?submit.735544

Share on: