CVE-2026-78246

Name of the Vulnerable Software and Affected Versions itsourcecode Online Clinic Management System version 1.0

Description An issue in the Admin Login component allows remote exploitation via SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. The flaw exists in the success/login.php endpoint through the manipulation of the Username variable, which could enable an attacker to bypass authentication and gain unauthorized administrative access to clinic records and system data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.