<?xml version="1.0" encoding="UTF-8"?>
<VrdaData refvuldefversion="1.2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://vrda.jpcert.or.jp" xsi:schemaLocation="http://vrda.jpcert.or.jp/feed/xsd/vrda_data.xsd">
  <VrdaDataProvider>
    <Name>JVN iPedia</Name>
    <URL>http://jvndb.jvn.jp</URL>
  </VrdaDataProvider>
  <VrdaDataSourceType>Advisory</VrdaDataSourceType>
  <Vulinfo revisionno="1" lang="ja" invalidated="false">
    <VulinfoID>JVNDB-2026-003247</VulinfoID>
    <VulinfoData>
      <Title>oretnom23&#12398;Medical Certificate Generator App using PHP and MySQL Free Source Code&#12395;&#12362;&#12369;&#12427;&#35079;&#25968;&#12398;&#33030;&#24369;&#24615;</Title>
      <VulinfoDescription>
        <Overview>SourceCodester Medical Certificate Generator App 1.0&#12395;&#33030;&#24369;&#24615;&#12364;&#30906;&#35469;&#12373;&#12428;&#12414;&#12375;&#12383;&#12290;&#24433;&#38911;&#12434;&#21463;&#12369;&#12427;&#37096;&#20998;&#12399;&#19981;&#26126;&#12391;&#12377;&#12290;&#12371;&#12398;&#25805;&#20316;&#12395;&#12424;&#12426;&#12463;&#12525;&#12473;&#12469;&#12452;&#12488;&#12522;&#12463;&#12456;&#12473;&#12488;&#12501;&#12457;&#12540;&#12472;&#12455;&#12522;&#65288;CSRF&#65289;&#12364;&#30330;&#29983;&#12375;&#12414;&#12377;&#12290;&#12522;&#12514;&#12540;&#12488;&#12363;&#12425;&#25915;&#25731;&#12364;&#24746;&#29992;&#21487;&#33021;&#12391;&#12377;&#12290;&#25915;&#25731;&#25163;&#27861;&#12399;&#20844;&#38283;&#12373;&#12428;&#12390;&#12362;&#12426;&#12289;&#24746;&#29992;&#12373;&#12428;&#12427;&#21487;&#33021;&#24615;&#12364;&#12354;&#12426;&#12414;&#12377;&#12290;</Overview>
      </VulinfoDescription>
      <Affected>
        <AffectedItem affectedstatus="vulnerable">
          <Lapt>cpe:/a:oretnom23:medical_certificate_generator_app</Lapt>
        </AffectedItem>
      </Affected>
      <FactAnalysis>
        <AccessComplexity>Low</AccessComplexity>
        <AccessVector>Network</AccessVector>
        <Authentication>None</Authentication>
        <AvailabilityImpact>None</AvailabilityImpact>
        <ConfidentialityImpact>None</ConfidentialityImpact>
        <IntegrityImpact>Partial</IntegrityImpact>
      </FactAnalysis>
      <Related>
        <RelatedItem relationtype="self" origin="jvnipedia">
          <URL>https://jvndb.jvn.jp/ja/contents/2026/JVNDB-2026-003247.html</URL>
        </RelatedItem>
        <RelatedItem relationtype="alternate" origin="other">
          <Name>Common Vulnerabilities and Exposures (CVE)</Name>
          <VulinfoID>CVE-2026-1745</VulinfoID>
          <URL>https://www.cve.org/CVERecord?id=CVE-2026-1745</URL>
        </RelatedItem>
        <RelatedItem relationtype="alternate" origin="other">
          <Name>National Vulnerability Database (NVD)</Name>
          <VulinfoID>CVE-2026-1745</VulinfoID>
          <URL>https://nvd.nist.gov/vuln/detail/CVE-2026-1745</URL>
        </RelatedItem>
        <RelatedItem relationtype="alternate" origin="other">
          <Name>VulDB</Name>
          <VulinfoID>CVE-2026-1745 SourceCodester Medical Certificate Generator App cross-site request forgery (EUVD-2026-5094)</VulinfoID>
          <URL>https://vuldb.com/?id.343676</URL>
        </RelatedItem>
        <RelatedItem relationtype="reference" origin="other">
          <Name>GitHub</Name>
          <VulinfoID>GitHub - Asim-QAZi/Cross-Site-Request-Forgery-Arbitrary-Medical-Certificate-Deletion (Cross-Site-Request-Forgery-Arbitrary-Medical-Certificate-Deletion)</VulinfoID>
          <URL>https://github.com/Asim-QAZi/Cross-Site-Request-Forgery-Arbitrary-Medical-Certificate-Deletion</URL>
        </RelatedItem>
        <RelatedItem relationtype="reference" origin="other">
          <Name>JVNDB</Name>
          <VulinfoID>CWE-862</VulinfoID>
          <Title>&#35469;&#35388;&#12398;&#27424;&#22914;</Title>
          <URL>https://cwe.mitre.org/data/definitions/862.html</URL>
        </RelatedItem>
        <RelatedItem relationtype="reference" origin="other">
          <Name>JVNDB</Name>
          <VulinfoID>CWE-352</VulinfoID>
          <Title>&#12463;&#12525;&#12473;&#12469;&#12452;&#12488;&#12522;&#12463;&#12456;&#12473;&#12488;&#12501;&#12457;&#12540;&#12472;&#12455;&#12522;</Title>
          <URL>https://jvndb.jvn.jp/ja/cwe/CWE-352.html</URL>
        </RelatedItem>
        <RelatedItem relationtype="reference" origin="other">
          <Name>VulDB</Name>
          <VulinfoID>Submit #742653: SourceCodester Medical Certificate Generator App 1.0 Cross-Site Request Forgery</VulinfoID>
          <URL>https://vuldb.com/?submit.742653</URL>
        </RelatedItem>
        <RelatedItem relationtype="reference" origin="other">
          <Name>&#38306;&#36899;&#25991;&#26360;</Name>
          <VulinfoID>GitHub - Asim-QAZi/Cross-Site-Request-Forgery-Arbitrary-Medical-Certificate-Deletion (https://github.com/Asim-QAZi/Cross-Site-Request-Forgery-Arbitrary-Medical-Certificate-Deletion#proof-of-concept-csrf-exploit)</VulinfoID>
          <URL>https://github.com/Asim-QAZi/Cross-Site-Request-Forgery-Arbitrary-Medical-Certificate-Deletion#proof-of-concept-csrf-exploit</URL>
        </RelatedItem>
        <RelatedItem relationtype="reference" origin="other">
          <Name>&#38306;&#36899;&#25991;&#26360;</Name>
          <VulinfoID>Free Source Code Projects and Tutorials - sourcecodester.com</VulinfoID>
          <URL>https://www.sourcecodester.com/</URL>
        </RelatedItem>
      </Related>
      <DateFirstPublished>2026-02-12T16:42:57+09:00</DateFirstPublished>
      <DateLastUpdated>2026-02-12T16:42:57+09:00</DateLastUpdated>
    </VulinfoData>
  </Vulinfo>
</VrdaData>
