MEDIUM
HashenUdara
CVE published 2026-10-26
CVE-2026-116112
A SQL injection vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to cc258425b915d1af9e298777ccd26d160493e68d, specifically in the file admin/add-new.php. The manipulation of the argument spec leads to SQL injection. This issue can be exploited remotely and a public exploit is available. The vulnerability allows attackers to potentially access or manipulate sensitive data, emph [truncated]