CVE-2026-105382

A flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function updatesubaccount of the file php/controller.php of the component Account Administration. This manipulation of the argument userid causes improper...

CVE-2026-105383

A vulnerability has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This impacts an unknown function of the file php/controller.php. Such manipulation of the argument transactionidS leads to sql injection. The attack can be executed remotely...

EUVD-2026-92494

A vulnerability has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This impacts an unknown function of the file php/controller.php. Such manipulation of the argument transactionidS leads to sql injection. The attack can be executed remotely...

CVE-2026-105383 onetwothreeneth HospitalManagementSystem controller.php sql injection

A vulnerability has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This impacts an unknown function of the file php/controller.php. Such manipulation of the argument transactionidS leads to sql injection. The attack can be executed remotely...

CVE-2026-105383 onetwothreeneth HospitalManagementSystem controller.php sql injection

A vulnerability has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This impacts an unknown function of the file php/controller.php. Such manipulation of the argument transactionidS leads to sql injection. The attack can be executed remotely...

CVE-2026-105383

A SQL injection vulnerability exists in the onetwothreeneth HospitalManagementSystem (up to commit 9ef91ed6007314b6473110ed699dff76d158f61d). The flaw is located in an unknown function within the php/controller.php file, where the manipulation of the transaction_idS argument allows for remote exe...

EUVD-2026-92479

A flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function updatesubaccount of the file php/controller.php of the component Account Administration. This manipulation of the argument userid causes improper...

CVE-2026-105382 onetwothreeneth HospitalManagementSystem Account Administration controller.php update_subaccount improper authorization

A flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function updatesubaccount of the file php/controller.php of the component Account Administration. This manipulation of the argument userid causes improper...

CVE-2026-105382 onetwothreeneth HospitalManagementSystem Account Administration controller.php update_subaccount improper authorization

A flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function updatesubaccount of the file php/controller.php of the component Account Administration. This manipulation of the argument userid causes improper...

CVE-2026-105382 onetwothreeneth HospitalManagementSystem Account Administration controller.php update_subaccount improper authorization

A flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function updatesubaccount of the file php/controller.php of the component Account Administration. This manipulation of the argument userid causes improper...

PT-2026-106023

A flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function update subaccount of the file php/controller.php of the component Account Administration. This manipulation of the argument user id causes improper...

CVE-2026-105382: Improper Authorization

A flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function updatesubaccount of the file php/controller.php of the component Account Administration. This manipulation of the argument userid causes improper...

PT-2026-106040

Name of the Vulnerable Software and Affected Versions onetwothreeneth HospitalManagementSystem versions prior to 9ef91ed6007314b6473110ed699dff76d158f61d Description A remote SQL injection exists in the file php/controller.php. This occurs when the transaction idS argument is manipulated, allowin...

CVE-2026-105383: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This impacts an unknown function of the file php/controller.php. Such manipulation of the argument transactionidS leads to sql injection. The attack can be executed remotely...

CVE-2026-104637

A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function addpatient/addphysician/addaccount/updateaccount/updatesubaccount/editphysician/editpatient of the file php/controller.php. Executing a...

CVE-2026-104637 onetwothreeneth HospitalManagementSystem controller.php edit_patient unrestricted upload

A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function addpatient/addphysician/addaccount/updateaccount/updatesubaccount/editphysician/editpatient of the file php/controller.php. Executing a...

CVE-2026-104637 onetwothreeneth HospitalManagementSystem controller.php edit_patient unrestricted upload

A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function addpatient/addphysician/addaccount/updateaccount/updatesubaccount/editphysician/editpatient of the file php/controller.php. Executing a...

EUVD-2026-91661

A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function addpatient/addphysician/addaccount/updateaccount/updatesubaccount/editphysician/editpatient of the file php/controller.php. Executing a...

CVE-2026-104637 onetwothreeneth HospitalManagementSystem controller.php edit_patient unrestricted upload

A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function addpatient/addphysician/addaccount/updateaccount/updatesubaccount/editphysician/editpatient of the file php/controller.php. Executing a...

CVE-2026-104637

A weakness exists in the onetwothreeneth HospitalManagementSystem (up to commit 9ef91ed6007314b6473110ed699dff76d158f61d ) within the php/controller.php file. Specifically, several functions—including add_patient , add_physician , add_account , update_account , update_subaccount , edit_physician ...