CVE-2022-28568 | BDVDB-2026-175295 Detail

Description#

Sourcecodester Doctor's Appointment System 1.0 is vulnerable to File Upload to RCE via Image upload from the administrator panel. An attacker can obtain remote command execution just by knowing the path where the images are stored.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/b3nj1-1/CVE/tree/main/CVE-2022-28568

Exploit#

No public exploit known

History#

Version 12022-05-04Record published in the CVE List.
Version 22026-07-09Most recent update recorded in the CVE List.