Hcn0

**Name of the Vulnerable Software and Affected Versions** itsourcecode Hospital Management System version 1.0 **Description** A SQL injection issue exists in the `/prescriptionorderreport.php` endpoint. This occurs because the application fails to properly neutralize special elements within the `delid` argument, allowing a remote attacker to execute arbitrary SQL queries. **Recommendations** Update itsourcecode Hospital Management System version 1.0 to a patched version. As a temporary workaround, restrict access to the `/prescriptionorderreport.php` file to minimize the risk of exploitation.