HIGH

CVE-2026-90805

2026-09-14 CVSS v3.1

CVSS

7.3

Description

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown part of the file doctorlogin.php. Executing a manipulation of the argument doc_mail/doc_pswd can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.

Weakness (CWE)

CWE-74 Injection

CWE-89 SQL Injection

EPSS Score

0.26%

Probability of exploitation in next 30 days

18.5th percentile

References

https://github.com/subhajitkhan/online-clinic-management-system/ https://github.com/subhajitkhan/online-clinic-management-system/issues/3 https://vuldb.com/cve/CVE-2026-90805 https://vuldb.com/submit/920373 https://vuldb.com/vuln/403307 https://vuldb.com/vuln/403307/cti

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE