CVE-2026-14730

Name of the Vulnerable Software and Affected Versions itsourcecode Hospital Management System version 1.0

Description A security flaw allows remote attackers to perform SQL injection, a technique used to manipulate database queries, by manipulating the patientname argument within the '/patientprofile.php' endpoint.

Recommendations As a temporary workaround, restrict access to the '/patientprofile.php' endpoint or avoid using the patientname parameter until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.