CVE-2022-36202: Doctor's Appointment System Project Doctor's Appointment System

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php. The settings.php is affected by Broken Access Control (IDOR) via id= parameter.

Affected products

• Doctor's Appointment System Project Doctor's Appointment System: version 1.0 only

Published 2022-08-31. Last modified 2026-07-09.