CNNVD-202602-1216 Information
CNNVD ID
CNNVD-202602-1216
Related CVE
- CNNVD Published: 2026-02-08
Description (Chinese)
SourceCodester Patients Waiting Area Queue Management System是SourceCodester开源的一个病人候诊区排队管理系统。 SourceCodester Patients Waiting Area Queue Management System 1.0版本存在代码注入漏洞，该漏洞源于对文件/appointments.php中参数patient_id的错误操作，可能导致跨站脚本攻击。
Description (English)
ServiceCodester Patients Waiting Area Queue Management System is a waiting area management system for patients from the Open Source of ServiceCodester. There is a code-infusion loophole in Version 1.0 of SourceCodeCodeCosterPatients Waing Area Queue Management System, which results from a mishandling of the parameter Patient id in the file/appointments.php, which could result in a cross-stop script attack.
Hazard Level
High
Vulnerability Type
代码注入
Affected Vendor
SourceCodester
Published
2026-02-08
Last Modified
2026-02-24
References
https://vuldb.com/?ctiid.344851 https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Patients-Waiting-Area-Queue-Management-System-appointments-XSS.md https://vuldb.com/?id.344851 https://vuldb.com/?submit.747920 https://access.redhat.com/security/cve/cve-2026-2149
Share on: