CVE-2026-19384 | SourceCodester Simple Doctors Appointment System 1.0 ajax.php?action=set_appointment ID sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Doctors Appointment System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=set_appointment. This manipulation of the argument ID causes sql injection.

This vulnerability appears as CVE-2026-19384. The attack may be initiated remotely. In addition, an exploit is available.