Lucene search
K

161 matches found

RedhatCVE
RedhatCVE
added 2026/06/09 2:59 p.m.5 views

CVE-2026-11501

A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=savepatient. The manipulation of the argument ID results in sql injection. It is possible to launch the attack...

7.5CVSS5.4AI score0.00412EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/06/09 2:58 a.m.9 views

CVE-2026-11468

A vulnerability was detected in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /admin/?page=roomtypes. Performing a manipulation of the argument room results in cross site scripting. The attack is possible to be carried out...

4.8CVSS3.9AI score0.00347EPSS
Exploits0References1
NVD
NVD
added 2026/06/08 10:16 a.m.10 views

CVE-2026-11501

A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=savepatient. The manipulation of the argument ID results in sql injection. It is possible to launch the attack...

7.5CVSS0.00412EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/06/08 9:15 a.m.3 views

CVE-2026-11501

A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=savepatient. The manipulation of the argument ID results in sql injection. It is possible to launch the attack...

7.5CVSS7AI score0.00412EPSS
Exploits0References6Affected Software1
EUVD
EUVD
added 2026/06/08 9:15 a.m.8 views

EUVD-2026-35035

A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=savepatient. The manipulation of the argument ID results in sql injection. It is possible to launch the attack...

7.5CVSS5.4AI score0.00412EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2026/06/08 9:15 a.m.6 views

CVE-2026-11501 SourceCodester Hospitals Patient Records Management System Master.php save_patient sql injection

A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=savepatient. The manipulation of the argument ID results in sql injection. It is possible to launch the attack...

7.5CVSS5.4AI score0.00412EPSS
Exploits0References6
CVE
CVE
added 2026/06/08 9:15 a.m.18 views

CVE-2026-11501

The CVE-2026-11501 entry concerns SourceCodester Hospitals Patient Records Management System 1.0. The flaw is a SQL injection in the handling of the ID parameter in /classes/Master.php?f=save_patient, enabling remote exploitation. The vulnerability stems from improper input handling in a server-s...

7.5CVSS7AI score0.00412EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/06/08 12:0 a.m.1 views

SourceCodester Hospitals Patient Records Management System 跨站脚本漏洞

SourceCodester Hospitals Patient Records Management System is an open-source hospital medical record management system developed by SourceCodester. Version 1.0 of the SourceCodester Hospitals Patient Records Management System contains a cross-site scripting vulnerability. This vulnerability stems...

4.8CVSS4.2AI score0.00347EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/06/08 12:0 a.m.9 views

PT-2026-47263

A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=save patient. The manipulation of the argument ID results in sql injection. It is possible to launch the attack...

7.5CVSS7AI score0.00412EPSS
Exploits0References7
Cvelist
Cvelist
added 2026/06/07 11:30 p.m.39 views

CVE-2026-11468 SourceCodester Hospitals Patient Records Management System page room_types cross site scripting

A vulnerability was detected in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /admin/?page=roomtypes. Performing a manipulation of the argument room results in cross site scripting. The attack is possible to be carried out...

4.8CVSS0.00347EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2026/06/07 11:30 p.m.5 views

CVE-2026-11468 SourceCodester Hospitals Patient Records Management System page room_types cross site scripting

A vulnerability was detected in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /admin/?page=roomtypes. Performing a manipulation of the argument room results in cross site scripting. The attack is possible to be carried out...

4.8CVSS3.9AI score0.00347EPSS
Exploits0References6
CVE
CVE
added 2026/06/07 11:30 p.m.15 views

CVE-2026-11468

SourceCodester Hospitals Patient Records Management System 1.0 is affected by CVE-2026-11468. The issue arises from unknown processing of the file path /admin/?page=room_types, where manipulating the argument room triggers a cross-site scripting (XSS) vulnerability. Exploitation is possible remot...

4.8CVSS4AI score0.00347EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/06/07 12:0 a.m.12 views

PT-2026-47199

A vulnerability was detected in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /admin/?page=room types. Performing a manipulation of the argument room results in cross site scripting. The attack is possible to be carried out...

4.8CVSS3.9AI score0.00347EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2026/06/01 10:3 p.m.9 views

CVE-2026-10185

A weakness has been identified in SourceCodester Hospitals Patient Records Management System 1.0. Affected is an unknown function of the file /classes/Users.php?f=save. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS5.6AI score0.00269EPSS
Exploits0References1
CVE
CVE
added 2026/06/01 10:45 a.m.25 views

CVE-2026-10250

The vulnerability CVE-2026-10250 affects itsourcecode Online Blood Bank Management System 1.0. An SQL injection can be triggered by manipulating the hospital argument in an unknown function of the file /admin/campsdetails.php, allowing remote exploitation. Exploit has been released publicly (expl...

7.5CVSS5.7AI score0.00263EPSS
Exploits0References6
NVD
NVD
added 2026/05/31 2:16 p.m.11 views

CVE-2026-10184

A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This impacts an unknown function of the file /classes/Users.php?f=delete. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS0.00269EPSS
Exploits0References6
NVD
NVD
added 2026/05/31 2:16 p.m.12 views

CVE-2026-10185

A weakness has been identified in SourceCodester Hospitals Patient Records Management System 1.0. Affected is an unknown function of the file /classes/Users.php?f=save. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS0.00269EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/05/31 1:45 p.m.25 views

CVE-2026-10185 SourceCodester Hospitals Patient Records Management System Users.php save sql injection

A weakness has been identified in SourceCodester Hospitals Patient Records Management System 1.0. Affected is an unknown function of the file /classes/Users.php?f=save. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS0.00269EPSS
Exploits0References6
EUVD
EUVD
added 2026/05/31 1:45 p.m.7 views

EUVD-2026-33507

A weakness has been identified in SourceCodester Hospitals Patient Records Management System 1.0. Affected is an unknown function of the file /classes/Users.php?f=save. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS6.9AI score0.00269EPSS
Exploits0References6
CVE
CVE
added 2026/05/31 1:45 p.m.11 views

CVE-2026-10185

SourceCodester Hospitals Patient Records Management System 1.0 contains a SQL injection in /classes/Users.php?f=save. The vulnerability arises from manipulating the ID argument, enabling remote exploitation. Public exploits are available. Exploit maturity is PROOF-OF-CONCEPT; CVSS metrics indicat...

7.5CVSS6.9AI score0.00269EPSS
Exploits0References6
Rows per page
Query Builder