Hackseven

**Name of the Vulnerable Software and Affected Versions** itsourcecode Hospital Management System version 1.0 **Description** A security flaw allows remote attackers to perform SQL injection, a technique used to manipulate database queries. The issue exists within an unknown function in the '/prescription.php' endpoint via the `editid` parameter. **Recommendations** As a temporary workaround, restrict access to the '/prescription.php' endpoint or avoid using the `editid` parameter until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.