Capc1N0

**Name of the Vulnerable Software and Affected Versions** itsourcecode Hospital Management System version 1.0 **Description** A security flaw exists in the `/patientdetail.php` endpoint. Manipulation of the `editid` argument allows for remote SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the `editid` parameter in the `/patientdetail.php` endpoint until the issue is resolved.