Itsourcecode · Hospital Management System · CVE-2026-15536
**Name of the Vulnerable Software and Affected Versions**
itsourcecode Hospital Management System version 1.0
**Description**
An issue exists in the `/patviewprescription.php` endpoint where improper handling of the `delid` variable allows for SQL injection. This allows a remote attacker to manipulate database queries via the affected parameter.
**Recommendations**
Update itsourcecode Hospital Management System version 1.0 to a patched version.
As a temporary mitigation, restrict access to the `/patviewprescription.php` file or avoid using the `delid` parameter until a fix is applied.