CNNVD-202601-3069 Information

CNNVD ID

CNNVD-202601-3069

CVE-2026-1146

  • CNNVD Published: 2026-01-19

Description (Chinese)

SourceCodester Patients Waiting Area Queue Management System是SourceCodester开源的一个病人候诊区排队管理系统。 SourceCodester Patients Waiting Area Queue Management System 1.0版本存在代码注入漏洞,该漏洞源于对文件/php/api_register_patient.php中参数firstName/lastName的错误操作,可能导致跨站脚本攻击。

Description (English)

ServiceCodester Patients Waiting Area Queue Management System is a waiting area management system for patients from the Open Source of ServiceCodester. AccessCodester Patients Waiting Area Queue Management System Version 1.0 contains a code-injection loophole, which results from an error in the parameter FirstName/lastName in the file/php/api register patient.php, which may result in a cross-stop script attack.

Hazard Level

Critical

Vulnerability Type

代码注入

Affected Vendor

SourceCodester

Published

2026-01-19

Last Modified

2026-02-24

References

https://vuldb.com/?ctiid.341739 https://vuldb.com/?id.341739 https://vuldb.com/?submit.735543

Share on: