EIP-2026-105918

PRE-CVE

Clinic Management System - Blind SQL Injection

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-105918. PoCs published by Yakir Wizman.

AI-analyzed exploit summary This is a technical writeup detailing a blind SQL injection vulnerability in Clinic Management System's apointment.php page via the 'age' POST parameter. It includes a proof-of-concept payload using SQLMap for time-based blind SQLi.

Description

Clinic Management System - Blind SQL Injection

Exploits (1)

exploitdb WRITEUP

by Yakir Wizman · textwebappsphp

https://www.exploit-db.com/exploits/40093

View Code ZIP pw:eip

This is a technical writeup detailing a blind SQL injection vulnerability in Clinic Management System's apointment.php page via the 'age' POST parameter. It includes a proof-of-concept payload using SQLMap for time-based blind SQLi.

Classification

Writeup 90%

Attack Type

Sqli

Complexity

Moderate

Reliability

Reliable

Target: Clinic Management System (All Versions)

No auth needed

Prerequisites: Access to the target server's apointment.php page

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026