6 matches found
CVE-2026-75088
A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewbilling.php. Executing a manipulation of the argument delid can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and...
CVE-2026-75088 itsourcecode Hospital Management System viewbilling.php sql injection
A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewbilling.php. Executing a manipulation of the argument delid can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and...
CVE-2026-75088
SQL injection exists in itsourcecode Hospital Management System 1.0 via the delid argument in /viewbilling.php, exploitable remotely with low privileges. CVSS 3.1 scores it Medium (6.3). Exploit details are not provided in the documents. No patch or workaround is mentioned. Monitor vendor for upd...
CVE-2026-75088 itsourcecode Hospital Management System viewbilling.php sql injection
A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewbilling.php. Executing a manipulation of the argument delid can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and...
PT-2026-76896
Name of the Vulnerable Software and Affected Versions itsourcecode Hospital Management System version 1.0 Description A remote SQL injection is possible due to improper handling of the delid argument within the /viewbilling.php endpoint. SQL injection is a technique where an attacker inserts...
CVE-2026-75088: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewbilling.php. Executing a manipulation of the argument delid can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and...