PatchSiren

HashenUdara CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM HashenUdara CVE published 2026-10-26

CVE-2026-116112

A SQL injection vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to cc258425b915d1af9e298777ccd26d160493e68d, specifically in the file admin/add-new.php. The manipulation of the argument spec leads to SQL injection. This issue can be exploited remotely and a public exploit is available. The vulnerability allows attackers to potentially access or manipulate sensitive data, emph [truncated]