CVE-2026-19347

MediumCVSS 6.3

Published: 09/08/2026(UTC)Updated: 12/08/2026(UTC)Translated: 09/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

A SQL injection vulnerability exists in itsourcecode Hospital Management System 1.0 in /viewdoctor.php. Manipulating the delid argument allows remote SQL queries. The exploit is public.

Risk Assessment

An attacker can gain unauthorized access to the database, potentially leading to leakage or modification of patient data.

Recommendation

Apply patches or update the system. Use parameterized queries to prevent SQL injection.

Original NVD description (English source)

A vulnerability was identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file /viewdoctor.php. Such manipulation of the argument delid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.