TI-2026-80245 Aliases CVE-2026-116112 GHSA-r6h4-5497-c694

SQL injection in HashenUdara edoc-doctor-appointment-system

HIGH 70CWE-74Published 2026-10-26 · Updated 2026-10-29

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: SQL injection
Confidentiality · integrity · availability: Low · Low · Low
Fix status: No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-89.

Summary

HashenUdara edoc-doctor-appointment-system is affected up to commit cc258425b915d1af9e298777ccd26d160493e68d, a rolling release without version numbers. Improper neutralization of special elements used in an SQL command (CWE-89) in the spec argument of admin/add-new.php lets a remote attacker inject SQL without authentication. A public exploit is available and might be used.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Description from the CNA

A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to cc258425b915d1af9e298777ccd26d160493e68d. The affected element is an unknown function of the file admin/add-new.php. The manipulation of the argument spec leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00254 17th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by the CNA

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
HashenUdara	edoc-doctor-appointment-system	cc258425b915d1af9e298777ccd26d160493e68d	—	No fix listed	CNA

edoc-doctor-appointment-system VendorHashenUdara Affected cc258425b915d1af9e298777ccd26d160493e68d Fixed in — No fix listed CNA

CPE names CNA · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:hashenudara:edoc-doctor-appointment-system::::::::	—	—	HashenUdara

cpe:2.3:a:hashenudara:edoc-doctor-appointment-system:*:*:*:*:*:*:*:* Versions — — ·HashenUdara

Remediation

The sources list no fixed version for edoc-doctor-appointment-system.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Timeline

2026-10-26 Threatist record created from CVE-2026-116112
2026-10-26 Priority changed: MEDIUM → LOW
2026-10-27 Alias added: GHSA-r6h4-5497-c694
2026-10-29 CISA SSVC decision points changed
2026-10-29 Priority changed: LOW → HIGH

References

Exploit 1

https://gist.github.com/asdfghjkl12345678910111/1519ad5b24ad2441cca911ecbfaa9acb

TI-2025-40338 Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection… CVSS 3.1CRITICAL 9.8
TI-2025-41085 edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in… CVSS 3.1HIGH 8.8
TI-2022-16860 Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection… CVSS 3.1CRITICAL 9.8
TI-2022-16859 Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection… CVSS 3.1CRITICAL 9.8
TI-2022-16858 Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection… CVSS 3.1CRITICAL 9.8
TI-2022-16861 Edoc-doctor-appointment-system v1.0.1 was discovered to contain a Cross-Site Request… CVSS 3.1HIGH 8.8

See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences