CVE-2026-109524

A vulnerability in girishsaraf Online-Appointment-Booking-System up to version f427b4757128ca253d33d0cc4e87bbb9c999a4d5 involves missing authorization in the file changebookingstatus.php, in the submit2 Handler component. Manipulation of the username[]/timestamp[]/status[] arguments leads to missing authorization. The attack can be performed remotely, and the exploit is publicly available. The vendor has not responded.

A SQL injection vulnerability was found in girishsaraf Online-Appointment-Booking-System in the file Admin/getclinic.php of the AJAX Endpoint component. Manipulation of the city/cid argument allows remote exploitation, and the exploit has been made public. The project uses a rolling release model, so version information is unavailable, and the issue report has not been responded to.

A SQL injection vulnerability was found in girishsaraf Online-Appointment-Booking-System in the file Admin/deleteclinic.php of the Admin CRUD Endpoint component. Manipulation of the cid/did argument allows remote exploitation, and the exploit has been disclosed to the public. The project follows a rolling release approach, so version details are not provided, and the issue report has not been responded to.

A SQL injection vulnerability was detected in girishsaraf Online-Appointment-Booking-System in the file changebookingstatus.php. Manipulation of the dateselected argument allows remote exploitation, and the exploit is now public. The product uses a rolling release model, so specific version information is not available, and the issue report has not been responded to.

A SQL injection vulnerability was identified in girishsaraf Online-Appointment-Booking-System in the book.php file of the Booking Handler component. Manipulation of the Doctor/appointment argument allows remote attacks, and the exploit has been made publicly available.

A SQL injection vulnerability was discovered in girishsaraf Online-Appointment-Booking-System in signup.php within the Registration Handler component. Manipulation of the fname argument allows SQL injection. The attack can be executed remotely and the exploit has been publicly released.

In girishsaraf Online-Appointment-Booking-System up to commit f427b4757128ca253d33d0cc4e87bbb9c999a4d5, the function mysqli_query in locateus.php (Doctor Search Endpoint) is vulnerable to SQL injection via the doctorname argument. The attack can be performed remotely, and the exploit is publicly available.

In girishsaraf Online-Appointment-Booking-System up to commit f427b4757128ca253d33d0cc4e87bbb9c999a4d5, in get_town.php (AJAX Endpoint), manipulation of arguments countryid/townid/cid/didval/cidval leads to SQL injection. The attack can be launched remotely, and the exploit has been publicly disclosed.

In girishsaraf Online-Appointment-Booking-System up to commit f427b4757128ca253d33d0cc4e87bbb9c999a4d5, the function mysqli_query in Admin/mlogin.php (Login Handler) is vulnerable to SQL injection via the uname/pass arguments. The attack can be initiated remotely, and the exploit has been made public.

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqli_query of the file cover.php of the component Patient Login Handler. The manipulation of the argument uname/psw results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.