CVE-2026-82914

Name of the Vulnerable Software and Affected Versions kishan0725 Hospital-Management-System version 1.0

Description A security flaw allows remote attackers to perform SQL injection, a technique used to interfere with the queries that an application makes to its database. The issue exists in the /search.php endpoint when manipulating the Contact variable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, restrict access to the /search.php endpoint or avoid using the Contact variable until a fix is provided.