itsourcecode Hospital Management System vulnerabilities
23 known CVE vulnerabilities in itsourcecode Hospital Management System, translated and rated.
- CVE-2026-16009Medium
A SQL injection vulnerability was found in itsourcecode Hospital Management System 1.0 in the file /prescriptionorderdetail.php. The attack is performed by manipulating the delid argument, allowing remote SQL injection. The exploit is publicly available.
- CVE-2026-78112Medium
A vulnerability in itsourcecode Hospital Management System Project in PHP 1.0 in the file /viewservicetype.php allows manipulation of the delid argument, causing SQL injection. The attack may be initiated remotely.
- CVE-2026-77025Medium
A weakness has been identified in itsourcecode Hospital Management System 1.0. It affects an unknown part of the file /viewappointmentpending.php. Manipulation of the argument delid causes SQL injection. The attack can be carried out remotely, and the exploit is publicly available.
- CVE-2026-75088Medium
A vulnerability was determined in itsourcecode Hospital Management System 1.0, affecting an unknown function of the file /viewbilling.php. Manipulation of the argument delid leads to SQL injection. The attack can be launched remotely and the exploit has been publicly disclosed.
- CVE-2026-75087Medium
A vulnerability was found in itsourcecode Hospital Management System 1.0, affecting an unknown function of the file /viewdepartment.php. Manipulation of the argument delid results in SQL injection. The attack can be initiated remotely and the exploit has been made public.
- CVE-2026-19894Medium
In the itsourcecode Hospital Management System 1.0, a SQL injection vulnerability was found in the file /viewmedicine.php. Manipulation of the delid argument allows remote execution of SQL queries. The exploit has been published and may be used.
- CVE-2026-19347Medium
A SQL injection vulnerability exists in itsourcecode Hospital Management System 1.0 in /viewdoctor.php. Manipulating the delid argument allows remote SQL queries. The exploit is public.
- CVE-2026-19071Medium
SQL injection vulnerability in itsourcecode Hospital Management System 1.0, in an unknown function of the file /viewappointment.php, via manipulation of the argument delid. The attack can be performed remotely. The exploit has been published.
- CVE-2026-19070Medium
SQL injection vulnerability in itsourcecode Hospital Management System 1.0, in an unknown function of the file /viewadmin.php, via manipulation of the argument delid. The attack can be performed remotely. The exploit is now public.
- CVE-2026-19069Medium
SQL injection vulnerability in itsourcecode Hospital Management System 1.0, in an unknown function of the file /treatmentrecord.php, via manipulation of the argument editid. The attack can be performed remotely. The exploit has been publicly disclosed.
- CVE-2026-19068Medium
SQL injection vulnerability in itsourcecode Hospital Management System 1.0, in an unknown function of the file /treatmentdetail.php, via manipulation of the argument patientid. The attack can be performed remotely. The exploit has been made public.
- CVE-2026-19067Medium
SQL injection vulnerability in itsourcecode Hospital Management System 1.0, in an unknown function of the file /treatment.php, via manipulation of the argument editid. Remote exploitation is possible. The exploit has been released publicly.
- CVE-2026-19020Medium
A SQL injection vulnerability was found in itsourcecode Hospital Management System 1.0 in /servicetype.php via the editid argument. The attack can be performed remotely. The exploit is public and may be used.
- CVE-2026-16490Medium
In itsourcecode Hospital Management System 1.0, a vulnerability exists in an unknown function of the file /prescription.php. Manipulation of the editid argument results in SQL injection. The attack can be executed remotely, and the exploit is publicly available.
- CVE-2026-16334Medium
SQL injection vulnerability in the /prescriptionorder.php file of itsourcecode Hospital Management System 1.0. The attack can be launched remotely and the exploit is publicly available.
- CVE-2026-14731Medium
A SQL injection vulnerability has been found in itsourcecode Hospital Management System 1.0 in the file /patientreport.php. Manipulating the editid argument allows remote exploitation. A public exploit is available and could be used for attacks.
- CVE-2026-14730Medium
A SQL injection vulnerability has been discovered in itsourcecode Hospital Management System 1.0 in the /patientprofile.php file. An attacker can remotely manipulate the patientname argument, leading to SQL injection. The exploit has been publicly released and may be used in attacks.
- CVE-2026-14638Medium
A SQL injection vulnerability has been found in itsourcecode Hospital Management System 1.0 in the /patient.php file. An attacker can remotely manipulate the editid argument, leading to unauthorized database access. The exploit has been published and may be used.
- CVE-2026-14619Medium
A SQL injection vulnerability has been found in itsourcecode Hospital Management System 1.0 in the /medicine.php file. An attacker can remotely manipulate the editid argument, leading to unauthorized database access. The exploit has been published and may be used.
- CVE-2026-13520Medium
A SQL injection vulnerability was found in itsourcecode Hospital Management System 1.0 in the file /appointmentapproval.php. The Appointment Handler component improperly handles the editid argument, allowing SQL injection. The attack can be performed remotely and the exploit has been publicly disclosed.
- CVE-2026-13497Medium
A SQL injection vulnerability was found in itsourcecode Hospital Management System 1.0 in the file /appointment.php. An unknown function mishandles the editid argument, allowing remote SQL injection. The exploit has been publicly disclosed and may be used.
- CVE-2026-11514Medium
SQL injection vulnerability in /addpatient.php of itsourcecode Hospital Management System 1.0 via the admissiontme argument allows remote SQL injection.
- CVE-2026-11513Medium
SQL injection vulnerability in /adminaccount.php of itsourcecode Hospital Management System 1.0 via the Date argument allows remote SQL injection.

