A vulnerability has been found in itsourcecode Online Doctor Appointment System 1.0. This impacts an unknown function of the file /admin/patient_action.php. Such manipulation of the argument patient_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
[POC] CVE-2026-39808 — FortiSandbox-RCE-Exploit-CVE-2026-39808
FortiSandbox RCE Scanner — CVE-2026-39808
[POC] CVE-2026-39808 — CVE-2026-39808
Fortinet FortiSandbox 4.4.0-4.4.8 - OS Command Injection via tracer-behavior Endpoint
[POC] CVE-2026-39808 — CVE-2026-39808
CVE-2026-39808 - Fortinet Sandbox - Draft
[POC] CVE-2026-39808 — CVE-2026-39808
CVE-2026-39808
[POC] CVE-2026-39808 — CVE-2026-39808
PoC for Unauthenticated RCE in FortiSandbox via CVE-2026-39808
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free