Itsourcecode · Hospital Management System · CVE-2026-14638
**Name of the Vulnerable Software and Affected Versions**
itsourcecode Hospital Management System version 1.0
**Description**
A SQL injection flaw exists in the `/patient.php` file. This issue occurs when the `editid` argument is manipulated, allowing a remote attacker to execute unauthorized database queries.
**Recommendations**
Update itsourcecode Hospital Management System version 1.0 to a patched version.
As a temporary mitigation, restrict access to the `/patient.php` file or avoid using the `editid` parameter until a fix is applied.