CNNVD-202602-1215 Information
CNNVD ID
CNNVD-202602-1215
Related CVE
- CNNVD Published: 2026-02-08
Description (Chinese)
SourceCodester Patients Waiting Area Queue Management System是SourceCodester开源的一个病人候诊区排队管理系统。 SourceCodester Patients Waiting Area Queue Management System 1.0版本存在代码注入漏洞，该漏洞源于对文件/checkin.php中参数patient_id的错误操作，可能导致跨站脚本攻击。
Description (English)
ServiceCodester Patients Waiting Area Queue Management System is a waiting area management system for patients from the Open Source of ServiceCodester. SourceCodester Patients Waiting Area Queue Management System Version 1.0 contains a code-injection loophole, which results from a mishandling of the parameter Patient id in file/checkin.php, which may result in a cross-site script attack.
Hazard Level
High
Vulnerability Type
代码注入
Affected Vendor
SourceCodester
Published
2026-02-08
Last Modified
2026-02-24
References
https://vuldb.com/?ctiid.344852 https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Patients-Waiting-Area-Queue-Management-System-checkin-php-XSS.md https://vuldb.com/?submit.747921 https://vuldb.com/?id.344852 https://access.redhat.com/security/cve/cve-2026-2150
Share on: