---
id: CVE-2026-115248
title: >-
  subhajitkhan online-clinic-management-system Booking patappointtime.php
  behavioral workflow
summary: >-
  A vulnerability was detected in subhajitkhan online-clinic-management-system
  up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This issue affects some
  unknown processing of the file patappointtime.php of the component Booking
  Handler. The …
severity: medium
cvss: 5.4
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C'
cvssSource: cna
cwe:
  - CWE-841
  - CWE-840
vendor: subhajitkhan
product: online-clinic-management-system
affected:
  - online-clinic-management-system e9ee77a8827a1446220fa07ee693dc4d9a29a578
published: '2026-10-22'
updated: '2026-10-22'
sourceUpdated: '2026-10-22T13:30:10.769Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-115248'
references:
  - url: 'https://vuldb.com/vuln/425221'
    label: >-
      VDB-425221 | subhajitkhan online-clinic-management-system Booking
      patappointtime.php behavioral workflow
  - url: 'https://vuldb.com/vuln/425221/cti'
    label: 'VDB-425221 | CTI Indicators (IOB, IOC, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-115248'
    label: CVE-2026-115248 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1021709'
    label: >-
      Submit #1021709 | subhajitkhan online-clinic-management-system
      e9ee77a8827a1446220fa07ee693dc4d9a29a578 Client-Side Enforcement of
      Server-Side Security
  - url: 'https://github.com/subhajitkhan/online-clinic-management-system/issues/10'
  - url: 'https://github.com/subhajitkhan/online-clinic-management-system/'
tags:
  - cve.org
ingestedAt: '2026-10-22T22:00:50.264Z'
---

## Overview

A vulnerability was detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This issue affects some unknown processing of the file patappointtime.php of the component Booking Handler. The manipulation results in enforcement of behavioral workflow. It is possible to launch the attack remotely. The exploit is now public and may be used. The patch is identified as e9ee77a8827a1446220fa07ee693dc4d9a29a578. It is advisable to implement a patch to correct this issue. The project was informed of the problem early through an issue report but has not responded yet.

## Affected

- `online-clinic-management-system e9ee77a8827a1446220fa07ee693dc4d9a29a578`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.