CVE-2026-116112
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
A vulnerability was identified in HashenUdara edoc-doctor-appointment-system in the file admin/add-new.php, where manipulation of the 'spec' argument leads to SQL injection. The attack can be performed remotely, and a publicly available exploit may be used. The product uses a rolling release model, so no version details are available.
Risk Assessment
Remote SQL injection could allow unauthorized access to the database, modification, or leakage of patient and appointment data. The public availability of the exploit increases the risk of rapid exploitation.
Recommendation
Apply the vendor patch as soon as it becomes available; in the meantime, restrict access to the admin panel and implement input validation and WAF rules.
Other vulnerabilities in edoc-doctor-appointment-system
See all- CVE-2025-65358Critical
Edoc-doctor-appointment-system v1.0.1 contains an SQL injection vulnerability via the 'docid' parameter at /admin/appointment.php.
- CVE-2025-66918High
edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add-session.php via the "title" parameter.
Original NVD description (English source)
A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to cc258425b915d1af9e298777ccd26d160493e68d. The affected element is an unknown function of the file admin/add-new.php. The manipulation of the argument spec leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS