Lucene search
+L

15 matches found

NVD
NVD
added 2026/07/05 11:16 p.m.13 views

CVE-2026-14774

A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /paymentdischarge.php. This manipulation of the argument patientid causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and ma...

6.5CVSS0.00204EPSS
Exploits0References6
NVD
NVD
added 2026/07/05 11:16 p.m.11 views

CVE-2026-14773

A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /payment.php. The manipulation of the argument patientid results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...

6.5CVSS0.00204EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/07/05 10:15 p.m.32 views

CVE-2026-14773 itsourcecode Hospital Management System payment.php sql injection

A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /payment.php. The manipulation of the argument patientid results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...

6.5CVSS0.00204EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/07/05 12:0 a.m.16 views

PT-2026-55831

Name of the Vulnerable Software and Affected Versions itsourcecode Hospital Management System version 1.0 Description A SQL injection issue exists in the /paymentdischarge.php endpoint. This occurs when the patientid variable is manipulated, allowing a remote attacker to execute unauthorized...

6.5CVSS6.8AI score0.00204EPSS
Exploits0References9
NVD
NVD
added 2026/06/29 3:16 p.m.10 views

CVE-2026-13572

A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /insertbillingrecord.php. The manipulation of the argument patientid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS0.002EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/06/29 1:45 p.m.8 views

CVE-2026-13572

A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /insertbillingrecord.php. The manipulation of the argument patientid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS6.5AI score0.002EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2026/06/29 1:45 p.m.40 views

CVE-2026-13572 itsourcecode Hospital Management System insertbillingrecord.php sql injection

A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /insertbillingrecord.php. The manipulation of the argument patientid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS0.002EPSS
Exploits0References6
CVE
CVE
added 2026/06/29 1:45 p.m.18 views

CVE-2026-13572

The vulnerability CVE-2026-13572 affects itsourcecode Hospital Management System 1.0. The exposed flaw is in the file /insertbillingrecord.php, involving an unknown function where manipulating the argument patientid leads to a SQL injection. Attacks can be initiated remotely, and the exploit has ...

6.5CVSS6.5AI score0.002EPSS
Exploits0References6
NVD
NVD
added 2026/06/08 1:16 p.m.18 views

CVE-2026-11512

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file /billing.php. The manipulation of the argument patientid leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

5.3CVSS0.00273EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/06/08 12:0 p.m.7 views

CVE-2026-11512

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file /billing.php. The manipulation of the argument patientid leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

5.3CVSS3.8AI score0.00273EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2026/06/08 12:0 p.m.46 views

CVE-2026-11512 itsourcecode Hospital Management System billing.php cross site scripting

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file /billing.php. The manipulation of the argument patientid leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

5.3CVSS0.00273EPSS
Exploits0References6
CVE
CVE
added 2026/06/08 12:0 p.m.20 views

CVE-2026-11512

CVE-2026-11512 affects itsourcecode Hospital Management System 1.0. The vulnerability arises from handling of the patientid argument in /billing.php, enabling cross-site scripting (XSS). The issue is exploitable remotely, and the exploit has been publicly disclosed. CVSS metrics indicate a networ...

5.3CVSS3.8AI score0.00273EPSS
Exploits0References6
EUVD
EUVD
added 2026/06/08 12:0 p.m.15 views

EUVD-2026-35060

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file /billing.php. The manipulation of the argument patientid leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

5.3CVSS3.8AI score0.00273EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/06/08 12:0 a.m.16 views

itsourcecode Hospital Management System 跨站脚本漏洞

itsourcecode Hospital Management System is an open-source hospital management system developed by itsourcecode. Version 1.0 of itsourcecode Hospital Management System has a cross-site scripting vulnerability. This vulnerability stems from the handling of the patientid parameter in the billing.php...

5.3CVSS4.6AI score0.00273EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/12/08 12:0 a.m.9 views

PT-2022-24557 · Canon Medical Informatics · Vitrea Vision

Name of the Vulnerable Software and Affected Versions: Canon Medical Informatics Vitrea Vision version 7.7.76.1 Description: The issue is related to inadequate access control enforcement, allowing an authenticated user to gain unauthorized access to imaging records. This can be achieved by...

6.5CVSS6.4AI score0.00474EPSS
Exploits0References4
Rows per page
Query Builder