CVE-2026-11514

Name of the Vulnerable Software and Affected Versions itsourcecode Hospital Management System version 1.0

Description A flaw in the /addpatient.php file allows for remote SQL injection. This occurs through the manipulation of the admissiontme argument. SQL injection is a technique where an attacker inserts malicious SQL code into a query, potentially allowing them to view, modify, or delete data from the database.

Recommendations Update itsourcecode Hospital Management System version 1.0 to a patched version. As a temporary workaround, restrict access to the /addpatient.php file or avoid using the admissiontme parameter until a fix is applied.