CVE-2026-3817
A vulnerability was detected in SourceCodester Patients Waiting Area Queue Management System 1.0. This issue affects some unknown processing of the file /patient-search.php. The manipulation results in improper authorization. The attack can be launched remotely. The exploit is now public and may be used.
- Score
- CVSS 4.0 6.9 Medium
- Status
- Analyzed - cna@vuldb.com
- Published
- 2026-03-09
- Last modified
- 2026-03-09
- Weaknesses
- CWE-266, CWE-285
Affected products
- Patients Waiting Area Queue Management System (Pamzey)
- Patients Waiting Area Queue Management System (Sourcecodester)
References
- https://gist.github.com/HxH404/c4c8e7ce7fe5cde98aca176fba9d7207
- https://vuldb.com/?ctiid.349783
- https://vuldb.com/?id.349783
- https://vuldb.com/?submit.769535
- https://www.sourcecodester.com/
