Luodinglong

**Name of the Vulnerable Software and Affected Versions** itsourcecode Hospital Management System version 1.0 **Description** A SQL injection issue exists in the `/viewroom.php` endpoint. This occurs when the `delid` variable is manipulated, allowing a remote attacker to execute arbitrary SQL commands. **Recommendations** Update itsourcecode Hospital Management System version 1.0 to a patched version. As a temporary workaround, restrict access to the `/viewroom.php` endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** itsourcecode Hospital Management System version 1.0 **Description** A remote SQL injection is possible due to improper handling of the `delid` variable within the `/viewdepartment.php` endpoint. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to manipulate the database. **Recommendations** Update itsourcecode Hospital Management System version 1.0 to a patched version. As a temporary workaround, restrict access to the `/viewdepartment.php` endpoint to minimize the risk of exploitation.