01 Record

CVE-2026-19839

SourceCodester Simple Doctors Appointment System save_file.php save_doctor unrestricted upload

MediumPUBLISHEDCNA: VulDB

Base score5.1 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

02 Description

SourceCodester Simple Doctors Appointment System save_file.php save_doctor unrestricted upload

Published: 2026-08-14 16:15Z2 HR AGO
Last updated: 2026-08-14 16:15Z2 HR AGO
Reserved: 2026-08-14
Assigning CNA: VulDB
Record state: PUBLISHED
Severity: Medium (CVSS 5.1)
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Weaknesses: CWE-284 CWE-434
SSVC decision: No CISA-ADP assessment
Data version: 5.2
Document digest: d9676d752ba02f0db073a28c0317a2e470a98e3682cbf3e5b67bc670518b0e1b

VendorProductVersionsPlatforms

vuldb.comVDB-389977 | SourceCodester Simple Doctors Appointment System save_file.php save_doctor unrestricted uploadhttps://vuldb.com/vuln/389977vdb-entrytechnical-description
vuldb.comVDB-389977 | CTI Indicators (IOB, IOC, TTP, IOA)https://vuldb.com/vuln/389977/ctisignaturepermissions-required
vuldb.comCVE-2026-19839 | CVE Analysis and Reporthttps://vuldb.com/cve/CVE-2026-19839third-party-advisory
vuldb.comSubmit #870577 | SourceCodester Simple Doctor's Appointment System using PHP/MySQL with Source Code /doctors/admin/ajax.php?action=save_doctor 1.0 Unrestricted Uploadhttps://vuldb.com/submit/870577third-party-advisory
github.comhttps://github.com/HZFW2026/cve/issues/3exploitissue-tracking
www.sourcecodester.comhttps://www.sourcecodester.com/product