CVE-2026-90858

CVE-2026-90858 affects the session_start function in adminappview.php of the subhajitkhan online-clinic-management-system project (GitHub), up to commit e9ee77a8827a1446220fa07ee693dc4d9a29a578. By manipulating the adminmail argument, a remote attacker with no prior privileges can achieve an auth...

EUVD-2026-78261

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Affected by this vulnerability is the function sessionstart of the file adminappview.php. Executing a manipulation of the argument adminmail can lead to authorization bypass. The...

CVE-2026-90858: Authorization Bypass Through User-Controlled Key

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Affected by this vulnerability is the function sessionstart of the file adminappview.php. Executing a manipulation of the argument adminmail can lead to authorization bypass. The...

PT-2026-91854

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Affected by this vulnerability is the function session start of the file adminappview.php. Executing a manipulation of the argument adminmail can lead to authorization bypass. The...