CVE-2026-7632
HighSummary
A vulnerability was identified in the Online Hospital Management System version 1.0, affecting an unknown function in the /viewappointment.php file. Manipulation of the delid argument leads to SQL injection.
Risk Assessment
An attacker can remotely exploit this vulnerability, posing a serious threat to the integrity of the database and the confidentiality of patient data.
Recommendation
It is recommended to update the system to the latest version and implement input data filtering to prevent SQL injection.
Other vulnerabilities in Online Hospital Management System 1.0
See all- CVE-2026-10299Low
A weakness has been identified in code-projects Online Hospital Management System 1.0 in the file viewdoctortimings.php. Manipulation of the delid argument causes improper control of resource identifiers. The attack can be initiated remotely and the exploit is publicly available.
- CVE-2026-10186High
An SQL injection vulnerability was found in code-projects Online Hospital Management System 1.0 in the file /patient.php via the editid argument. The attack can be executed remotely and the exploit is publicly available.
Original NVD description (English source)
A vulnerability was determined in code-projects Online Hospital Management System 1.0. This affects an unknown function of the file /viewappointment.php. This manipulation of the argument delid causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.