CVE-2026-14703

creationtimestamp| type| source ---|---|--- 2026-07-05 05:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116865605611564132 2026-07-05 05:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpus6ntnj72a 2026-07-05 10:04:14+00:00| seen|...

CVE-2026-14703 itsourcecode Hospital Management System patientorder.php sql injection

A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /patientorder.php. Such manipulation of the argument editid leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and...

CVE-2026-14703

The CVE concerns itsourcecode Hospital Management System 1.0, where an SQL injection is possible in /patientorder.php via the editid parameter. Root cause: likely unsafely constructed SQL leading to data disclosure or modification. A remote attacker could exploit this (network access) and the att...