CVE-2026-75087

Name of the Vulnerable Software and Affected Versions itsourcecode Hospital Management System version 1.0

Description A remote SQL injection is possible due to improper handling of the delid variable within the /viewdepartment.php endpoint. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to manipulate the database.

Recommendations Update itsourcecode Hospital Management System version 1.0 to a patched version. As a temporary workaround, restrict access to the /viewdepartment.php endpoint to minimize the risk of exploitation.