Threats tagged 'ghsa-62fh-m47w-8hwj'

CVE-2026-19934 is a SQL injection vulnerability in itsourcecode Hospital Management System 1.0, specifically involving the delid argument in the /vieworder.php file. This vulnerability allows remote attackers with low privileges to manipulate SQL queries, potentially impacting confidentiality, integrity, and availability. The vulnerability has a medium severity score of 6.3 and public exploit code has been disclosed.