CVE-2026-19347 itsourcecode Hospital Management System viewdoctor.php sql injection

A vulnerability was identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file /viewdoctor.php. Such manipulation of the argument delid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might b...

CVE-2026-19071 itsourcecode Hospital Management System viewappointment.php sql injection

A flaw has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewappointment.php. This manipulation of the argument delid causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...

CVE-2026-19070

The CVE affects itsourcecode Hospital Management System 1.0, specifically the /viewadmin.php script where the delid parameter can be manipulated to trigger a SQL injection. The root cause is an injection vulnerability in that file/parameter, enabling remote exploitation with low prerequisites. CV...

CVE-2026-19020: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /servicetype.php. This manipulation of the argument editid causes sql injection. It is possible to initiate the attack remotely. The exploit has be...

CVE-2026-19069: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /treatmentrecord.php. The manipulation of the argument editid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2026-19067: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /treatment.php. Performing a manipulation of the argument editid results in sql injection. Remote exploitation of the attack is possible. The exploit has bee...

CVE-2026-19071: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewappointment.php. This manipulation of the argument delid causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...

CVE-2026-19068: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /treatmentdetail.php. Executing a manipulation of the argument patientid can lead to sql injection. The attack can be executed remotely. The exploit has been made...

CVE-2026-16490: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /prescription.php. The manipulation of the argument editid results in sql injection. The attack can be executed remotely. The exploit has been released to the public and...

CVE-2026-16334: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Hospital Management System 1.0. This vulnerability affects unknown code of the file /prescriptionorder.php. Such manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and...

CVE-2026-16131: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /prescriptionrecord.php. This manipulation of the argument delid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to...

CVE-2026-16009: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /prescriptionorderdetail.php. The manipulation of the argument delid results in sql injection. The attack can be launched remotely. The exploit is now public and may be used...

CVE-2026-14774

The vulnerability CVE-2026-14774 affects itsourcecode Hospital Management System 1.0. The issue lies in the file /paymentdischarge.php, where manipulation of the argument patientid leads to a SQL injection. Access may be remote, and the exploit has been publicly disclosed and may be used. The ava...

CVE-2026-14773 itsourcecode Hospital Management System payment.php sql injection

A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /payment.php. The manipulation of the argument patientid results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...

CVE-2026-14703

The CVE concerns itsourcecode Hospital Management System 1.0, where an SQL injection is possible in /patientorder.php via the editid parameter. Root cause: likely unsafely constructed SQL leading to data disclosure or modification. A remote attacker could exploit this (network access) and the att...

CVE-2026-14730: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /patientprofile.php. Performing a manipulation of the argument patientname results in sql injection. The attack can be initiated remotely. The explo...

CVE-2026-14731: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /patientreport.php. Executing a manipulation of the argument editid can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the...

CVE-2026-14717: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /patientlogin.php. Performing a manipulation of the argument loginid results in sql injection. Remote exploitation of the attack is possible. The exploit is now...

CVE-2026-14774: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /paymentdischarge.php. This manipulation of the argument patientid causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and ma...

CVE-2026-14703: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /patientorder.php. Such manipulation of the argument editid leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and...