https://feed.craftedsignal.io/cpes/cpe2.3ahashenudaraedoc-doctor-appointment-system/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 26 Oct 2026 09:40:45 +0000https://feed.craftedsignal.io/favicon-32x32.pnghttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svghttps://feed.craftedsignal.io/briefs/2026-10-edoc-doctor-appointment-sql-injection/Mon, 26 Oct 2026 09:40:45 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-edoc-doctor-appointment-sql-injection/A SQL injection vulnerability exists in the admin/add-new.php file of the edoc-doctor-appointment-system via the spec parameter.<p>CVE-2026-116112 is a SQL injection vulnerability in HashenUdara edoc-doctor-appointment-system up to commit cc258425b915d1af9e298777ccd26d160493e68d. The flaw exists in the admin/add-new.php file, where manipulation of the 'spec' argument leads to SQL injection. The attack can be initiated remotely. Public exploit code is available. The vendor did not respond to disclosure efforts. Due to the project's rolling release model, no specific version details for affected or updated releases are available.</p> highadvisory