← Back to CVE search

CVE-2026-13496

itsourcecode Hospital Management System

Description

A vulnerability was found in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /ajaxmedicine.php. The manipulation of the argument medicineid results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.

CVSS 6.3EPSS 0.20400000000000001%Risk 0.64
View source
Published
2026-06-28 13:16:53
Affected versions
==1.0
Type
Web application
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L