Lucene search
+L

34 matches found

RedhatCVE
RedhatCVE
•added 2026/06/09 2:59 p.m.•29 views

CVE-2026-11501

A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=savepatient. The manipulation of the argument ID results in sql injection. It is possible to launch the attack...

7.5CVSS5.4AI score0.00263EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/09 2:58 a.m.•34 views

CVE-2026-11468

A vulnerability was detected in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /admin/?page=roomtypes. Performing a manipulation of the argument room results in cross site scripting. The attack is possible to be carried out...

4.8CVSS3.9AI score0.00214EPSS
SaveExploits0References1
NVD
NVD
•added 2026/06/08 10:16 a.m.•24 views

CVE-2026-11501

A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=savepatient. The manipulation of the argument ID results in sql injection. It is possible to launch the attack...

7.5CVSS0.00263EPSS
SaveExploits0References6
CVE
CVE
•added 2026/06/08 9:15 a.m.•56 views

CVE-2026-11501

The CVE-2026-11501 entry concerns SourceCodester Hospitals Patient Records Management System 1.0. The flaw is a SQL injection in the handling of the ID parameter in /classes/Master.php?f=save_patient, enabling remote exploitation. The vulnerability stems from improper input handling in a server-s...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/08 12:00 a.m.•3 views

CVE-2026-11501: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=savepatient. The manipulation of the argument ID results in sql injection. It is possible to launch the attack...

7.5CVSS5.6AI score0.00263EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/08 12:00 a.m.•1 views

CVE-2026-11468: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /admin/?page=roomtypes. Performing a manipulation of the argument room results in cross site scripting. The attack is possible to be carried out...

4.8CVSS4.1AI score0.00214EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/07 12:00 a.m.•43 views

PT-2026-47199

A vulnerability was detected in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /admin/?page=room types. Performing a manipulation of the argument room results in cross site scripting. The attack is possible to be carried out...

4.8CVSS3.9AI score0.00214EPSS
SaveExploits0References7
NVD
NVD
•added 2026/05/31 2:16 p.m.•39 views

CVE-2026-10184

A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This impacts an unknown function of the file /classes/Users.php?f=delete. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS0.00269EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/05/31 1:45 p.m.•32 views

EUVD-2026-33507

A weakness has been identified in SourceCodester Hospitals Patient Records Management System 1.0. Affected is an unknown function of the file /classes/Users.php?f=save. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS6.9AI score0.00269EPSS
SaveExploits0References6
CVE
CVE
•added 2026/05/31 1:45 p.m.•57 views

CVE-2026-10185

SourceCodester Hospitals Patient Records Management System 1.0 contains a SQL injection in /classes/Users.php?f=save. The vulnerability arises from manipulating the ID argument, enabling remote exploitation. Public exploits are available. Exploit maturity is PROOF-OF-CONCEPT; CVSS metrics indicat...

7.5CVSS6.9AI score0.00269EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/05/31 1:30 p.m.•36 views

EUVD-2026-33506

A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This impacts an unknown function of the file /classes/Users.php?f=delete. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS6.9AI score0.00269EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/05/31 12:00 a.m.•21 views

SourceCodester Hospitals Patient Records Management System SQL注入漏洞

SourceCodester Hospitals Patient Records Management System is an open-source hospital medical record management system developed by SourceCodester. Version 1.0 of the SourceCodester Hospitals Patient Records Management System has a SQL injection vulnerability. This vulnerability arises from the...

7.5CVSS7.2AI score0.00269EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/05/31 12:00 a.m.•28 views

PT-2026-45196

A weakness has been identified in SourceCodester Hospitals Patient Records Management System 1.0. Affected is an unknown function of the file /classes/Users.php?f=save. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS6.9AI score0.00269EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2026/05/26 8:14 p.m.•23 views

CVE-2026-9355

A flaw has been found in SourceCodester Hospitals Patient Records Management System 1.0. The impacted element is an unknown function of the file /classes/Master.php?f=savepatienthistory. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/26 4:30 p.m.•18 views

CVE-2026-9564

A vulnerability was found in SourceCodester/oretnom23 Hospitals Patient Records Management System 1.0. The impacted element is an unknown function of the file /admin/?page=patients/viewpatient. Performing a manipulation of the argument Remarks results in cross site scripting. Remote exploitation ...

4.8CVSS4.4AI score0.0035EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
•added 2026/05/26 4:30 p.m.•31 views

EUVD-2026-31864

A vulnerability was found in SourceCodester/oretnom23 Hospitals Patient Records Management System 1.0. The impacted element is an unknown function of the file /admin/?page=patients/viewpatient. Performing a manipulation of the argument Remarks results in cross site scripting. Remote exploitation ...

4.8CVSS4.4AI score0.0035EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/05/26 4:30 p.m.•61 views

CVE-2026-9564 SourceCodester/oretnom23 Hospitals Patient Records Management System view_patient cross site scripting

A vulnerability was found in SourceCodester/oretnom23 Hospitals Patient Records Management System 1.0. The impacted element is an unknown function of the file /admin/?page=patients/viewpatient. Performing a manipulation of the argument Remarks results in cross site scripting. Remote exploitation ...

4.8CVSS0.0035EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/05/26 4:30 p.m.•30 views

CVE-2026-9564 SourceCodester/oretnom23 Hospitals Patient Records Management System view_patient cross site scripting

A vulnerability was found in SourceCodester/oretnom23 Hospitals Patient Records Management System 1.0. The impacted element is an unknown function of the file /admin/?page=patients/viewpatient. Performing a manipulation of the argument Remarks results in cross site scripting. Remote exploitation ...

4.8CVSS4.4AI score0.0035EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/05/26 12:00 a.m.•28 views

SourceCodester Hospitals Patient Records Management System 代码注入漏洞

SourceCodester Hospitals Patient Records Management System is an open-source hospital medical record management system developed by SourceCodester. Version 1.0 of the SourceCodester Hospitals Patient Records Management System contains a code injection vulnerability. This vulnerability arises from...

4.8CVSS5.6AI score0.0035EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/26 12:00 a.m.•2 views

CVE-2026-9564: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester/oretnom23 Hospitals Patient Records Management System 1.0. The impacted element is an unknown function of the file /admin/?page=patients/viewpatient. Performing a manipulation of the argument Remarks results in cross site scripting. Remote exploitation ...

4.8CVSS4.1AI score0.0035EPSS
SaveExploits0References3
Rows per page
Query Builder