HIGH

CVE-2026-19384

2026-08-10 CVSS v3.1

CVSS

7.3

Description

A weakness has been identified in SourceCodester Simple Doctors Appointment System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=set_appointment. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.

Weakness (CWE)

CWE-74 Injection

CWE-89 SQL Injection

EPSS Score

0.26%

Probability of exploitation in next 30 days

18.5th percentile

References

https://github.com/HZFW2026/cve/issues/2 https://vuldb.com/cve/CVE-2026-19384 https://vuldb.com/submit/867120 https://vuldb.com/vuln/387284 https://vuldb.com/vuln/387284/cti https://www.sourcecodester.com/

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE