This vulnerability in code-projects Online Hospital Management System 1.0 arises from improper authorization in an unknown function within the Registration Handler component. By manipulating the Username argument, an attacker with low privileges can remotely bypass authorization controls. The CVSS 4.0 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no user interaction, and limited impact on confidentiality, integrity, and availability. No official fix or patch has been published as of the vulnerability disclosure date.

Successful exploitation allows a remote attacker with low privileges to bypass authorization controls related to user registration or handling, potentially leading to unauthorized access or actions within the system. The impact is limited to partial compromise of confidentiality, integrity, and availability as indicated by the CVSS vector. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected system and monitor for suspicious activity related to user registration. Avoid exposing the Registration Handler component to untrusted networks if possible.