Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.1
CVE-2026-19364: itsourcecode Hospital Management System: SQL Injection via Doctor Consultancy Charges
CVE-2026-19364 · published 2 months ago
Summary
The itsourcecode Hospital Management System 1.0 has a security issue that allows an attacker to inject malicious SQL code into the system. This can happen when a user views doctor consultancy charges. To protect your system, update to a patched version or consider replacing it with a more secure alternative.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| itsourcecode | hospital management system | 1.0 |
Original advisory text
itsourcecode Hospital Management System viewdoctorconsultancycharge.php sql injection
A vulnerability was determined in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /viewdoctorconsultancycharge.php. This manipulation of the argument delid causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-74Injection
CWE-89SQL Injection
Timeline
Published9 Aug 2026
Updated3 Nov 2026
First seen9 Aug 2026
Track software like this
Free during beta