PT-2026-20645
CVE-2026-2706
·
Published
2026-02-19
·
Updated
2026-02-23
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
code-projects Patient Record Management System version 1.0
Description
A flaw exists in code-projects Patient Record Management System version 1.0, specifically within the file
/fecalysis not.php. Manipulation of the comp id argument can lead to SQL injection. This issue is remotely exploitable. The exploit has been published.Recommendations
Apply any available updates or patches for code-projects Patient Record Management System version 1.0.
As a temporary workaround, restrict access to the
/fecalysis not.php file.
Sanitize or validate the comp id argument to prevent SQL injection attacks.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾