Threats Tagged 'cve-2026-105383'

A SQL injection vulnerability exists in onetwothreeneth HospitalManagementSystem affecting an unknown function in php/controller.php via the transaction_idS argument. The vulnerability allows remote attackers to manipulate SQL queries, potentially impacting confidentiality, integrity, and availability. The product uses a rolling release model, so specific affected versions are not available. The issue was reported early but remains unpatched. The vulnerability has a CVSS score of 7.3, indicating medium severity. No public exploits are known in the wild at this time.

CVE-2026-105383 is a medium severity SQL injection vulnerability in onetwothreeneth HospitalManagementSystem affecting an unknown function in php/controller.php. The vulnerability arises from manipulation of the transaction_idS argument and can be exploited remotely without authentication. The product uses a rolling release model, so specific affected or fixed versions are not available. The issue was reported to the project early, but no response or patch has been provided yet. Public exploit code has been disclosed, increasing the risk of exploitation.