---
id: CVE-2026-115247
title: >-
  subhajitkhan online-clinic-management-system patientregistration.php missing
  encryption
summary: >-
  A security vulnerability has been detected in subhajitkhan
  online-clinic-management-system up to
  e9ee77a8827a1446220fa07ee693dc4d9a29a578. This vulnerability affects unknown
  code of the file patientregistration.php. The manipulation of t…
severity: medium
cvss: 4.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C'
cvssSource: cna
cwe:
  - CWE-311
  - CWE-310
vendor: subhajitkhan
product: online-clinic-management-system
affected:
  - online-clinic-management-system e9ee77a8827a1446220fa07ee693dc4d9a29a578
published: '2026-10-22'
updated: '2026-10-22'
sourceUpdated: '2026-10-22T13:15:19.125Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-115247'
references:
  - url: 'https://vuldb.com/vuln/425220'
    label: >-
      VDB-425220 | subhajitkhan online-clinic-management-system
      patientregistration.php missing encryption
  - url: 'https://vuldb.com/vuln/425220/cti'
    label: 'VDB-425220 | CTI Indicators (IOB, IOC, TTP, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-115247'
    label: CVE-2026-115247 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1021708'
    label: >-
      Submit #1021708 | subhajitkhan online-clinic-management-system
      e9ee77a8827a1446220fa07ee693dc4d9a29a578 Cleartext Storage of Sensitive
      Information
  - url: 'https://github.com/subhajitkhan/online-clinic-management-system/issues/9'
  - url: 'https://github.com/subhajitkhan/online-clinic-management-system/'
tags:
  - cve.org
ingestedAt: '2026-10-22T22:00:50.263Z'
---

## Overview

A security vulnerability has been detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This vulnerability affects unknown code of the file patientregistration.php. The manipulation of the argument pat_pswd/doc_pswd leads to missing encryption of sensitive data. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.

## Affected

- `online-clinic-management-system e9ee77a8827a1446220fa07ee693dc4d9a29a578`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.