Pugeh

**Name of the Vulnerable Software and Affected Versions** itsourcecode Hospital Management System version 1.0 **Description** A remote SQL injection exists in the `/patientappointment.php` file. This occurs when the `patiente` argument is manipulated, allowing an attacker to execute arbitrary SQL commands on the database. **Recommendations** Update itsourcecode Hospital Management System version 1.0 to a patched version. As a temporary workaround, restrict access to the `/patientappointment.php` file to minimize the risk of exploitation.