CVE-2026-14619

Name of the Vulnerable Software and Affected Versions itsourcecode Hospital Management System version 1.0

Description A flaw in the /medicine.php file allows for remote exploitation via SQL injection. This occurs when the editid variable is manipulated, potentially allowing an attacker to interfere with the database queries.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the /medicine.php file or avoid using the editid parameter until a patch is available.