CVE-2026-14730: itsourcecode Hospital Management System patientprofile.php sql injection
A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /patientprofile.php. Performing a manipulation of the argument patientname results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14730?
The severity of CVE-2026-14730 is rated as medium with a score of 6.3.
How can CVE-2026-14730 be exploited?
CVE-2026-14730 can be exploited through SQL injection by manipulating the 'patientname' argument in the patientprofile.php file.
What software is affected by CVE-2026-14730?
CVE-2026-14730 affects itsourcecode Hospital Management System version 1.0.
What type of vulnerability is CVE-2026-14730?
CVE-2026-14730 is classified as an SQL Injection vulnerability.
How do I fix CVE-2026-14730?
To fix CVE-2026-14730, ensure that proper input validation and parameterized queries are implemented to prevent SQL injection in patientprofile.php.