Threat database

CVE-2026-76991 is a SQL injection vulnerability in itsourcecode Hospital Management System version 1.0. The flaw exists in the /viewappointmentapproved.php file where manipulation of the 'delid' argument can lead to SQL injection. This vulnerability allows remote attackers to execute unauthorized SQL commands. The exploit code has been publicly disclosed. The vulnerability has a medium severity rating with a CVSS 4.0 score of 5.3.

CVE-2026-75088 is a medium severity SQL injection vulnerability in itsourcecode Hospital Management System version 1.0. The flaw exists in the /viewbilling.php file where manipulation of the 'delid' argument can lead to SQL injection. This vulnerability can be exploited remotely without user interaction. The exploit has been publicly disclosed but there are no known exploits in the wild. No patch or remediation information is currently available.

CVE-2026-75087 is a medium severity SQL injection vulnerability in itsourcecode Hospital Management System version 1.0. The flaw exists in the /viewdepartment.php file where manipulation of the 'delid' argument allows remote attackers to perform SQL injection. Exploit code has been publicly disclosed, but no known active exploitation in the wild has been reported. No official patch or remediation guidance is currently provided.

CVE-2026-75086 is a medium severity SQL injection vulnerability in itsourcecode Hospital Management System version 1.0. The flaw exists in an unknown function within the /viewroom.php file, where manipulation of the 'delid' parameter allows remote attackers to perform SQL injection. The vulnerability has been publicly disclosed and exploit code is available, but there are no known exploits in the wild. No official patch or remediation guidance has been provided.

A vulnerability was detected in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewprescriptionrecord.php. The manipulation of the argument delid results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used.

CVE-2026-19973 is a medium severity SQL injection vulnerability in itsourcecode Hospital Management System version 1.0. The flaw exists in the /viewpaymentreport.php file where manipulation of the 'delid' parameter allows remote attackers to perform SQL injection. The exploit code has been publicly disclosed, but no official patch or remediation guidance is currently available.

A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewpatient.php. Such manipulation of the argument delid leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

A vulnerability has been found in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /vieworder.php. The manipulation of the argument delid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewmedicine.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.

A weakness has been identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file viewdoctortimings.php. Executing a manipulation of the argument delid can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.

CVE-2026-19364 is a medium severity SQL injection vulnerability in itsourcecode Hospital Management System version 1.0. The flaw exists in an unknown function within the /viewdoctorconsultancycharge.php file, where manipulation of the 'delid' argument allows remote attackers to perform SQL injection. The vulnerability has been publicly disclosed, but no official patch or remediation guidance is currently available.

A vulnerability was identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file /viewdoctor.php. Such manipulation of the argument delid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.

CVE-2026-19071 is a medium-severity SQL injection vulnerability in itsourcecode Hospital Management System version 1.0. The flaw exists in the /viewappointment.php file where manipulation of the 'delid' parameter allows remote attackers to perform SQL injection. Exploit code has been published, but no official patch or remediation guidance is currently available.

CVE-2026-19070 is a medium severity SQL injection vulnerability in itsourcecode Hospital Management System version 1.0. The flaw exists in the /viewadmin.php file where the 'delid' parameter can be manipulated remotely to perform SQL injection. Exploit code for this vulnerability is publicly available. No official patch or remediation guidance has been provided by the vendor yet.

CVE-2026-19069 is a medium severity SQL injection vulnerability in itsourcecode Hospital Management System version 1.0. The flaw exists in the /treatmentrecord.php file where manipulation of the 'editid' parameter can lead to SQL injection. The vulnerability can be exploited remotely without user interaction. Public exploit code has been disclosed, but no official patch or remediation guidance is currently available.