CVE-2022-28568

CRITICAL 9.8CVE-2022-28568 · Published 04/05/2022 · updated 09/07/2026

In short

CVE-2022-28568 is a CRITICAL (CVSS 9.8) vulnerability affecting simple doctor's appointment system (simple doctor's appointment system project).
Chance of exploitation in the next 30 days (EPSS): 3.3%, higher than 88.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
simple doctor's appointment system simple_doctor's_appointment_system_project	`= 1.0`	No fix yet

Description

Sourcecodester Doctor's Appointment System 1.0 is vulnerable to File Upload to RCE via Image upload from the administrator panel. An attacker can obtain remote command execution just by knowing the path where the images are stored.

References

b3nj1-1/CVE · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free