CVE-2026-19934 itsourcecode Hospital Management System vieworder.php sql injection

A vulnerability has been found in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /vieworder.php. The manipulation of the argument delid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the publi...

EUVD-2026-59746

A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewmedicine.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been released to the...

CVE-2026-19767

A weakness has been identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file viewdoctortimings.php. Executing a manipulation of the argument delid can lead to sql injection. The attack may be performed from remote. The exploit has been made...

CVE-2026-19767 itsourcecode Hospital Management System viewdoctortimings.php sql injection

A weakness has been identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file viewdoctortimings.php. Executing a manipulation of the argument delid can lead to sql injection. The attack may be performed from remote. The exploit has been made...

CVE-2026-19070

The CVE affects itsourcecode Hospital Management System 1.0, specifically the /viewadmin.php script where the delid parameter can be manipulated to trigger a SQL injection. The root cause is an injection vulnerability in that file/parameter, enabling remote exploitation with low prerequisites. CV...

CVE-2026-19069

CVE-2026-19069 affects the itsourcecode Hospital Management System 1.0, specifically the /treatmentrecord.php endpoint. The vulnerability arises from manipulating the editid parameter, enabling SQL injection. Exploitation is remote, and public disclosures exist. Connected sources document this is...

CVE-2026-19068 itsourcecode Hospital Management System treatmentdetail.php sql injection

A weakness has been identified in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /treatmentdetail.php. Executing a manipulation of the argument patientid can lead to sql injection. The attack can be executed remotely. The exploit has been made...

CVE-2026-16334 itsourcecode Hospital Management System prescriptionorder.php sql injection

A vulnerability was identified in itsourcecode Hospital Management System 1.0. This vulnerability affects unknown code of the file /prescriptionorder.php. Such manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and...

CVE-2026-14774

The vulnerability CVE-2026-14774 affects itsourcecode Hospital Management System 1.0. The issue lies in the file /paymentdischarge.php, where manipulation of the argument patientid leads to a SQL injection. Access may be remote, and the exploit has been publicly disclosed and may be used. The ava...

CVE-2026-14773 itsourcecode Hospital Management System payment.php sql injection

A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /payment.php. The manipulation of the argument patientid results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...

CVE-2026-14730 itsourcecode Hospital Management System patientprofile.php sql injection

A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /patientprofile.php. Performing a manipulation of the argument patientname results in sql injection. The attack can be initiated remotely. The explo...

CVE-2026-14703

The CVE concerns itsourcecode Hospital Management System 1.0, where an SQL injection is possible in /patientorder.php via the editid parameter. Root cause: likely unsafely constructed SQL leading to data disclosure or modification. A remote attacker could exploit this (network access) and the att...

CVE-2026-14659 itsourcecode Hospital Management System patientappointment.php sql injection

A vulnerability has been found in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /patientappointment.php. Such manipulation of the argument patiente leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public...

CVE-2026-13579 itsourcecode Hospital Management System patientchangepassword.php sql injection

A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /patientchangepassword.php. Executing a manipulation of the argument newpassword can lead to sql injection. The attack may be launched remotely. The...

CVE-2026-13578

CVE-2026-13578 affects itsourcecode Hospital Management System 1.0. The vulnerability is an SQL injection in the file /patientdetail.php triggered by manipulating the editid parameter. Attack vector is network-based with low complexity and no user interaction required; privileges appear to be low...

CVE-2026-13572

A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /insertbillingrecord.php. The manipulation of the argument patientid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-13548 itsourcecode Hospital Management System doctortimings.php sql injection

A vulnerability was identified in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /doctortimings.php. The manipulation of the argument editid leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might...

CVE-2026-13542

The CVE-2026-13542 entry concerns itsourcecode Hospital Management System 1.0. Affected is an unknown function in the file /doctorprofile.php where manipulation of the doctorname parameter enables SQL injection. The vulnerability can be triggered remotely, with public exploit disclosure reported ...

CVE-2026-13520 itsourcecode Hospital Management System Appointment appointmentapproval.php sql injection

A vulnerability was determined in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /appointmentapproval.php of the component Appointment Handler. This manipulation of the argument editid causes sql injection. The attack is possible to be carried out remotel...

CVE-2026-13520

The CVE describes a SQL injection in itsourcecode Hospital Management System v1.0, affecting the file /appointmentapproval.php (component: Appointment Handler). The vulnerability is triggered by manipulating the editid parameter, enabling remote exploitation. Exploit evidence is indicated as publ...