VULNERABILITY INTELLIGENCE

CVE-2022-28568

CVSS score9.8 CRITICAL

EPSS probability3.29%

CISA KEVNot currently listed

Published2022-05-04

Last modified2026-07-09

Description

Sourcecodester Doctor's Appointment System 1.0 is vulnerable to File Upload to RCE via Image upload from the administrator panel. An attacker can obtain remote command execution just by knowing the path where the images are stored.