CVE-2026-14774: itsourcecode Hospital Management System paymentdischarge.php sql injection
A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /paymentdischarge.php. This manipulation of the argument patientid causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14774?
The severity of CVE-2026-14774 is medium with a score of 6.3.
What does CVE-2026-14774 affect?
CVE-2026-14774 affects the itsourcecode Hospital Management System's paymentdischarge.php file.
How does the CVE-2026-14774 vulnerability occur?
The CVE-2026-14774 vulnerability occurs due to SQL injection via manipulation of the patientid argument.
Can CVE-2026-14774 be exploited remotely?
Yes, the CVE-2026-14774 vulnerability can be exploited remotely.
What is the recommended fix for CVE-2026-14774?
The recommended fix for CVE-2026-14774 is to sanitize and validate the input for the patientid parameter in the paymentdischarge.php file.