CVE-2026-3817 - Vulnerability Analysis

Overview

SourceCodester Patients Waiting Area Queue Management System 1.0 contains a broken access control caused by improper authorization in /patient-search.php, letting remote attackers bypass authorization, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can bypass authorization, potentially accessing or modifying unauthorized data.

Mitigation

Update to the latest version or apply vendor patches addressing authorization checks.

References

• https://gist.github.com/HxH404/c4c8e7ce7fe5cde98aca176fba9d7207
• https://vuldb.com/?ctiid.349783
• https://vuldb.com/?id.349783
• https://vuldb.com/?submit.769535
• https://www.sourcecodester.com/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner