CVE-2026-15536

Name of the Vulnerable Software and Affected Versions itsourcecode Hospital Management System version 1.0

Description An issue exists in the /patviewprescription.php endpoint where improper handling of the delid variable allows for SQL injection. This allows a remote attacker to manipulate database queries via the affected parameter.

Recommendations Update itsourcecode Hospital Management System version 1.0 to a patched version. As a temporary mitigation, restrict access to the /patviewprescription.php file or avoid using the delid parameter until a fix is applied.