Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was detected in itsourcecode Online Doctor Appointment System 1.0. This issue affects some unknown processing of the file /admin/appointment_action.php. The manipulation of the argument appointment_id results in sql injection. The attack can be launched remotely. The exploit is now public and may be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-20 | 1 | Disclosure1 |
| 2026-03-23 | 1 | Patch1 |
* CVE-2026-4473: Remote code execution possible in Online Doctor Appointment System. Patch now! * CVE-2026-3587: Unauth'd CLI exploit. Lock down your systems!
Post summary
The post announces two vulnerabilities—one allowing remote code execution in an online doctor appointment system, the other enabling unauthenticated CLI exploitation—and urges users to apply patches immediately.
CVE-2026-4473 A vulnerability was detected in itsourcecode Online Doctor Appointment System 1.0. This issue affects some unknown processing of the file /admin/appointment_action.php.… https://www.cve.org/CVERecord?id=CVE-2026-4473
Post summary
The post announces the detection of CVE‑2026‑4473 in Online Doctor Appointment System 1.0, indicating an unspecified issue in the file /admin/appointment_action.php, without providing further technical details or mitigation information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | unguardable | online_doctor_appointment_system | 1.0 | - | - |