Threats tagged 'ghsa-67g8-q7qm-wc9c'

CVE-2026-19068 is a medium severity SQL injection vulnerability in itsourcecode Hospital Management System version 1.0. The flaw exists in an unknown function within the file /treatmentdetail.php, where manipulation of the patientid argument can lead to SQL injection. This vulnerability can be exploited remotely, and public exploit code is available. No official patch or remediation guidance has been provided by the vendor as of the publication date.