{"id":"CVE-2026-115248","kind":"vulnerability","aliases":["CVE-2026-115248"],"related":[],"title":"Online clinic management system: booking handler flaw lets remote users bypass workflow","description":"A vulnerability was detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This issue affects some unknown processing of the file patappointtime.php of the component Booking Handler. The manipulation results in enforcement of behavioral workflow. It is possible to launch the attack remotely. The exploit is now public and may be used. The patch is identified as e9ee77a8827a1446220fa07ee693dc4d9a29a578. It is advisable to implement a patch to correct this issue. The project was informed of the problem early through an issue report but has not responded yet.","summary":"A flaw in the Booking Handler file patappointtime.php of the subhajitkhan online-clinic-management-system lets a remote user manipulate the appointment workflow. The exploit is public, and the project has not responded to the early report.","severity":"medium","cvss":5.5,"epss":0.0025,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["healthcare","other","php","self-hosted"],"not_affected_if":["not-deployed"],"how_to_check":"- Check whether the deployed copy of the project contains the file `patappointtime.php` and compare its commit against `e9ee77a8827a1446220fa07ee693dc4d9a29a578`\n- unknown","fix":"- Update the project to commit `e9ee77a8827a1446220fa07ee693dc4d9a29a578` or later, which the sources identify as the patch\n- unknown","status":"open","published_at":"2026-10-22T14:17:38+00:00","first_seen_at":"2026-10-23T21:57:31+00:00","triaged_at":"2026-10-25T04:10:43+00:00","updated_at":"2026-10-25T04:10:43+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-10-25T04:10:43Z","model":"claude-haiku-5-5","output":{"fix":"- Update the project to commit `e9ee77a8827a1446220fa07ee693dc4d9a29a578` or later, which the sources identify as the patch\n- unknown","reach":"internet","title":"Online clinic management system: booking handler flaw lets remote users bypass workflow","impact":"medium","summary":"A flaw in the Booking Handler file patappointtime.php of the subhajitkhan online-clinic-management-system lets a remote user manipulate the appointment workflow. The exploit is public, and the project has not responded to the early report.","category":"other","nicknames":[],"who_cares":["php","self-hosted","healthcare"],"confidence":0.5,"needs_auth":"unknown","worst_case":"remote users alter appointment booking workflow behavior","analyst_note":"Confirm the exact impact and the setup needed to reach patappointtime.php; check the NVD entry and the project's repository for the patch commit.","how_to_check":"- Check whether the deployed copy of the project contains the file `patappointtime.php` and compare its commit against `e9ee77a8827a1446220fa07ee693dc4d9a29a578`\n- unknown","needs_analyst":true,"not_affected_if":["not-deployed"],"who_is_affected":"Teams that deploy the subhajitkhan online-clinic-management-system up to commit e9ee77a8827a1446220fa07ee693dc4d9a29a578 and expose its booking endpoint to a network. Sources do not say whether the default configuration or any login is needed. Teams that do not run this project can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000633,"input_tokens":3458,"output_tokens":574,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-115248':15A,18A '-2026':14A,17A 'advis':125C 'affect':79C 'appoint':47B 'attack':106C 'behavior':98C 'book':5A,29B,90C 'bypass':11A 'clinic':2A,38B,71C 'compon':89C 'correct':131C 'cve':13A,16A 'detect':66C 'e9ee77a8827a1446220fa07ee693dc4d9a29a578':76C,122C 'earli':61B,141C 'enforc':96C 'exploit':50B,109C 'file':31B,85C 'flaw':7A,26B 'handler':6A,30B,91C 'healthcar':19B 'host':24B 'identifi':120C 'implement':127C 'inform':137C 'issu':78C,133C,144C 'launch':104C 'let':8A,41B 'manag':3A,39B,72C 'manipul':45B,93C 'may':114C 'onlin':1A,37B,70C 'online-clinic-management-system':36B,69C 'patappointtime.php':32B,86C 'patch':118C,129C 'php':21B 'possibl':102C 'problem':140C 'process':82C 'project':55B,135C 'public':52B,112C 'remot':9A,43B,107C 'report':62B,145C 'respond':58B,149C 'result':94C 'self':23B 'self-host':22B 'subhajitkhan':35B,68C 'system':4A,40B,73C 'unknown':81C 'use':116C 'user':10A,44B 'vulner':64C 'workflow':12A,48B,99C 'yet':150C","nicknames":[],"mitigations":[],"who_affected":"Teams that deploy the subhajitkhan online-clinic-management-system up to commit e9ee77a8827a1446220fa07ee693dc4d9a29a578 and expose its booking endpoint to a network. Sources do not say whether the default configuration or any login is needed. Teams that do not run this project can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T14:17:38+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-115248","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115248","severity":null,"published_at":"2026-10-22T14:17:38+00:00","modified_at":"2026-10-22T15:15:23+00:00","first_seen_at":"2026-10-23T21:57:31+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"epss","external_id":"CVE-2026-115248","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-115248","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}