{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/edoc-doctor-appointment-system--cc258425b915d1af9e298777ccd26d160493e68d/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:hashenudara:edoc-doctor-appointment-system:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.3,"id":"CVE-2026-116112"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["edoc-doctor-appointment-system (\u003c= cc258425b915d1af9e298777ccd26d160493e68d)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["HashenUdara"],"content_html":"\u003cp\u003eCVE-2026-116112 is a SQL injection vulnerability in HashenUdara edoc-doctor-appointment-system up to commit cc258425b915d1af9e298777ccd26d160493e68d. The flaw exists in the admin/add-new.php file, where manipulation of the 'spec' argument leads to SQL injection. The attack can be initiated remotely. Public exploit code is available. The vendor did not respond to disclosure efforts. Due to the project's rolling release model, no specific version details for affected or updated releases are available.\u003c/p\u003e\n","date_modified":"2026-10-26T09:40:45Z","date_published":"2026-10-26T09:40:45Z","id":"https://feed.craftedsignal.io/briefs/2026-10-edoc-doctor-appointment-sql-injection/","summary":"A SQL injection vulnerability exists in the admin/add-new.php file of the edoc-doctor-appointment-system via the spec parameter.","title":"HashenUdara edoc-doctor-appointment-system SQL Injection (CVE-2026-116112)","url":"https://feed.craftedsignal.io/briefs/2026-10-edoc-doctor-appointment-sql-injection/"}],"language":"en","title":"CraftedSignal Threat Feed - Edoc-Doctor-Appointment-System (\u003c= Cc258425b915d1af9e298777ccd26d160493e68d)","version":"https://jsonfeed.org/version/1.1"}