Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.1
CVE-2026-13579: itsourcecode Hospital Management System: Password Change SQL Injection
CVE-2026-13579 · published 4 months ago
Summary
The itsourcecode Hospital Management System's password change feature has a security weakness. This means that an attacker could potentially access sensitive information or take control of patient accounts. To protect your system, update the software to the latest version or apply the recommended security patch.
Original advisory text
A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /patientchangepassword.php. Executing a manipulation ...
A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /patientchangepassword.php. Executing a manipulation of the argument newpassword can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-74Injection
CWE-89SQL Injection
Timeline
Published29 Jun 2026
Updated4 Nov 2026
First seen29 Jun 2026
Sources
CVE-2026-13579 · NVD
Track software like this
Free during beta