CVE-2026-4617

HIGH

SourceCodester Patients Waiting Area Queue Management System Patient Check-In api_patient_checkin.php ValidateToken improper authorization

Title source: cna
STIX 2.1

Description

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is the function ValidateToken of the file /php/api_patient_checkin.php of the component Patient Check-In Module. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.

References (5)

Core 5
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-352481 | SourceCodester Patients Waiting Area Queue Management System Patient Check-In api_patient_checkin.php ValidateToken improper authorization
https://vuldb.com/?id.352481
Signature, Permissions Required signature permissions-required
VDB-352481 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/?ctiid.352481
Third Party Advisory third-party-advisory
Submit #775747 | SourceCodester Patients Waiting Area Queue Management System 1.0 Improper Access Controls
https://vuldb.com/?submit.775747

Scores

CVSS v3 7.3
EPSS 0.0035
EPSS Percentile 26.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-266 CWE-285
Status published
Products (1)
SourceCodester/Patients Waiting Area Queue Management System 1.0
Published Mar 24, 2026
Tracked Since Mar 24, 2026