Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.1
CVE-2026-13542: itsourcecode Hospital Management System 1.0 Doctor Profile SQL Injection
CVE-2026-13542 · published 4 months ago
Summary
A security issue in itsourcecode Hospital Management System 1.0 allows an attacker to inject malicious SQL code through the doctor's name field. This could allow unauthorized access to sensitive information. We recommend updating to the latest version of the software to fix this issue.
Original advisory text
A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /doctorprofile.php. The manipulation of the argument doctornam...
A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /doctorprofile.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-74Injection
CWE-89SQL Injection
Timeline
Published29 Jun 2026
Updated3 Nov 2026
First seen29 Jun 2026
Sources
CVE-2026-13542 · NVD
Track software like this
Free during beta