Product

HospitalManagementSystem (Up to Commit 9ef91ed6007314b6473110ed699dff76d158f61d)

2 briefs RSS

SQL Injection in UNION HospitalManagementSystem

The UNION HospitalManagementSystem is vulnerable to remote SQL injection via the patient_id parameter in patient_info.php, allowing unauthenticated attackers to manipulate database queries.

HospitalManagementSystem web-vulnerability sqli remote-code-execution

1r 1t 1c 3d ago

high advisory

SQL Injection Vulnerability in HospitalManagementSystem (CVE-2026-104609)

2 rules 1 TTP 1 CVE

The onetwothreeneth HospitalManagementSystem contains a remote SQL injection vulnerability in edit_accounts.php that allows unauthenticated attackers to execute arbitrary database queries.

HospitalManagementSystem +1 web-application sql-injection cve-2026-104609 sqli vulnerability

2r 1t 1c updated 3d ago