Veille CVE

Lundi 7 septembre 2026

2 CVE

  1. CVE-2026-86302 5.3 Moyenne

    code-projects Hospital Information System

    A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

  2. CVE-2026-86301 3.5 Faible

    code-projects Hospital Information System

    A vulnerability has been found in code-projects Hospital Information System 1.0. Affected is an unknown function of the file /HIS/src/patients/editPatient.php of the component Patient Management. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.