CVE-2026-3724 - Vulnerability Analysis

Overview

SourceCodester Patients Waiting Area Queue Management System 1.0 contains a broken access control caused by manipulation of the "patient_id" argument in /checkin.php, letting remote attackers bypass authorization, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can bypass authorization, potentially accessing or modifying unauthorized data.

Mitigation

Update to the latest version or apply patches addressing authorization checks.

References

• https://github.com/hiranerakkot/Patients-Waiting-Area-Queue-Management-System/blob/main/README.md
• https://vuldb.com/?ctiid.349700
• https://vuldb.com/?id.349700
• https://vuldb.com/?submit.766389
• https://www.sourcecodester.com/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner