CVE-2026-16244

Name of the Vulnerable Software and Affected Versions itsourcecode Hospital Management System version 1.0

Description A SQL injection issue exists in the /prescriptionorderreport.php endpoint. This occurs because the application fails to properly neutralize special elements within the delid argument, allowing a remote attacker to execute arbitrary SQL queries.

Recommendations Update itsourcecode Hospital Management System version 1.0 to a patched version. As a temporary workaround, restrict access to the /prescriptionorderreport.php file to minimize the risk of exploitation.