CVE-2026-19839
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
A vulnerability was detected in SourceCodester Simple Doctors Appointment System 1.0. The issue affects the save_doctor function in /save_file.php, allowing unrestricted file upload. The attack can be executed remotely, and the exploit is publicly available.
Risk Assessment
The risk includes the possibility of remote upload of malicious files, potentially leading to system compromise or arbitrary code execution.
Recommendation
It is recommended to immediately update the system or apply vendor patches, and restrict access to /save_file.php.
Original NVD description (English source)
A vulnerability was detected in SourceCodester Simple Doctors Appointment System 1.0. This issue affects the function save_doctor of the file /save_file.php. The manipulation results in unrestricted upload. The attack can be executed remotely. The exploit is now public and may be used.