A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected is an unknown function of the file /patient-search.php. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used.
References
| Link | Resource |
|---|---|
| https://gist.github.com/archana1122m/e2953222b47c29c8c69855f5d623267d | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.347677 | Permissions Required VDB Entry |
| https://vuldb.com/?id.347677 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.759845 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
25 Feb 2026, 20:50
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Pamzey patients Waiting Area Queue Management System
Pamzey |
|
| CPE | cpe:2.3:a:pamzey:patients_waiting_area_queue_management_system:1.0:*:*:*:*:*:*:* | |
| References | () https://gist.github.com/archana1122m/e2953222b47c29c8c69855f5d623267d - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.347677 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.347677 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.759845 - Third Party Advisory, VDB Entry |
25 Feb 2026, 08:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-25 08:16
Updated : 2026-02-25 20:50
NVD link : CVE-2026-3170
Mitre link : CVE-2026-3170
CVE.ORG link : CVE-2026-3170
JSON object : View
Products Affected
pamzey
- patients_waiting_area_queue_management_system