CVE:CVE-2022-36202
CNNVD:CNNVD-202208-4517
Doctor’s Appointment System是Hashen Udara个人开发者的一个医生预约系统。
Doctor’s Appointment System 1.0版本存在安全漏洞，该漏洞源于其edoc/patient/settings.php存在不正确的访问控制导致settings.php组件的参数id=出现中断访问控制（IDOR）。
solution:Upgrade doctor's_appointment_system_project doctor's_appointment_system to a higher version than 1.0,and avoid the version 1.0