---
id: CVE-2026-105469
title: >-
  A vulnerability was determined in girishsaraf
  Online-Appointment-Booking-System up to
  f427b4757128ca253d33d0cc4e87bbb9c999a4d5
summary: >-
  A vulnerability was determined in girishsaraf
  Online-Appointment-Booking-System up to
  f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This vulnerability affects unknown
  code of the file get_town.php of the component AJAX Endpoint. Executing a …
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'
cwe:
  - CWE-74
  - CWE-89
vendor: girishsaraf
product: Online-Appointment-Booking-System
affected:
  - Online-Appointment-Booking-System f427b4757128ca253d33d0cc4e87bbb9c999a4d5
published: '2026-10-05'
updated: '2026-10-05'
sourceUpdated: '2026-10-05T23:17:01.320'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-105469'
references:
  - url: 'https://github.com/girishsaraf/Online-Appointment-Booking-System/'
    label: cna@vuldb.com
  - url: 'https://github.com/girishsaraf/Online-Appointment-Booking-System/issues/7'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/cve/CVE-2026-105469'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/submit/984335'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/413615'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/413615/cti'
    label: cna@vuldb.com
tags:
  - nvd
  - cve.org
ingestedAt: '2026-10-05T22:35:24.748Z'
---

## Overview

A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This vulnerability affects unknown code of the file get_town.php of the component AJAX Endpoint. Executing a manipulation of the argument countryid/townid/cid/didval/cidval can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.