Vivian

**Name of the Vulnerable Software and Affected Versions** itsourcecode Hospital Management System version 1.0 **Description** An issue exists in the `/doctortimings.php` endpoint where manipulation of the `editid` argument allows for SQL injection. This allows a remote attacker to execute arbitrary SQL commands on the database. **Recommendations** Update itsourcecode Hospital Management System version 1.0 to a patched version. As a temporary mitigation, restrict access to the `/doctortimings.php` file.