Veille CVE

Mardi 30 juin 2026

4 CVE

  1. CVE-2026-13548 6.3 Moyenne

    itsourcecode Hospital Management System

    A vulnerability was identified in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /doctortimings.php. The manipulation of the argument editid leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

  2. CVE-2026-13542 6.3 Moyenne

    itsourcecode Hospital Management System

    A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /doctorprofile.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

  3. CVE-2026-13530 6.3 Moyenne

    itsourcecode Hospital Management System

    A vulnerability was identified in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /appointmentdetail.php of the component Appointment Handler. The manipulation of the argument editid leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.

  4. CVE-2026-13572 6.3 Moyenne

    itsourcecode Hospital Management System

    A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /insertbillingrecord.php. The manipulation of the argument patientid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.