CVE-2026-14717: itsourcecode Hospital Management System patientlogin.php sql injection
A vulnerability was detected in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /patientlogin.php. Performing a manipulation of the argument loginid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14717?
CVE-2026-14717 has a severity rating of medium, with a CVSS score of 6.3.
How do I fix CVE-2026-14717?
To fix CVE-2026-14717, validate and sanitize the input for the 'loginid' parameter in the /patientlogin.php file to prevent SQL injection.
What is the risk associated with CVE-2026-14717?
CVE-2026-14717 poses a risk due to SQL injection vulnerabilities that can be exploited remotely.
Can CVE-2026-14717 affect data integrity?
Yes, CVE-2026-14717 can compromise data integrity as it allows attackers to manipulate database queries.
What software is affected by CVE-2026-14717?
CVE-2026-14717 affects version 1.0 of the itsourcecode Hospital Management System.