Advisories · Technology

girishsaraf Online-Appointment-Booking-System.

Every CVE that names girishsaraf Online-Appointment-Booking-System among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-109525 CVE record

CVSS 6.9 Medium

girishsaraf Online-Appointment-Booking-System submit2 changebookingstatus.php authorization
- girishsaraf Online-Appointment-Booking-System
- Broken access control
Not analysed yet 13 Oct 2026
CVE-2026-109524 CVE record

CVSS 6.9 Medium

girishsaraf Online-Appointment-Booking-System Admin Display Pages showdoctor.php authorization
- girishsaraf Online-Appointment-Booking-System
- Broken access control
Not analysed yet 13 Oct 2026
CVE-2026-109523 CVE record

CVSS 6.9 Medium

girishsaraf Online-Appointment-Booking-System AJAX Endpoint getclinic.php sql injection
- girishsaraf Online-Appointment-Booking-System
- Other injection
- SQL injection
Not analysed yet 13 Oct 2026
CVE-2026-109522 CVE record

CVSS 6.9 Medium

girishsaraf Online-Appointment-Booking-System Admin CRUD Endpoint deleteclinic.php sql injection
- girishsaraf Online-Appointment-Booking-System
- Other injection
- SQL injection
Not analysed yet 13 Oct 2026
CVE-2026-109521 CVE record

CVSS 6.9 Medium

girishsaraf Online-Appointment-Booking-System changebookingstatus.php sql injection
- girishsaraf Online-Appointment-Booking-System
- Other injection
- SQL injection
Not analysed yet 13 Oct 2026
CVE-2026-105472 CVE record

CVSS 5.3 Medium

girishsaraf Online-Appointment-Booking-System Booking book.php sql injection
- girishsaraf Online-Appointment-Booking-System
- Other injection
- SQL injection
Not analysed yet 6 Oct 2026
CVE-2026-105471 CVE record

CVSS 6.9 Medium

girishsaraf Online-Appointment-Booking-System Registration signup.php sql injection
- girishsaraf Online-Appointment-Booking-System
- Other injection
- SQL injection
Not analysed yet 5 Oct 2026
CVE-2026-105470 CVE record

CVSS 6.9 Medium

girishsaraf Online-Appointment-Booking-System Doctor Search Endpoint locateus.php mysqli_query sql injection
- girishsaraf Online-Appointment-Booking-System
- Other injection
- SQL injection
Not analysed yet 5 Oct 2026
CVE-2026-105469 CVE record

CVSS 6.9 Medium

girishsaraf Online-Appointment-Booking-System AJAX Endpoint get_town.php sql injection
- girishsaraf Online-Appointment-Booking-System
- Other injection
- SQL injection
Not analysed yet 5 Oct 2026
CVE-2026-105468 CVE record

CVSS 6.9 Medium

girishsaraf Online-Appointment-Booking-System Login mlogin.php mysqli_query sql injection
- girishsaraf Online-Appointment-Booking-System
- Other injection
- SQL injection
Not analysed yet 5 Oct 2026
CVE-2026-105387 CVE record

CVSS 6.9 Medium

girishsaraf Online-Appointment-Booking-System Patient Login cover.php mysqli_query sql injection
- girishsaraf Online-Appointment-Booking-System
- Other injection
- SQL injection
Not analysed yet 5 Oct 2026