Vulnerabilities CVE-2026-76574

CVE-2026-76574

Medium

Open

TLP:CLEAR

code-projects Hospital Information System User Login UsersController.php login sql injection

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the function User::login of the file includes/users/UsersController.php of the component User Login Handler. This manipulation of the argument email causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.

Details

CVSS Score: 6.9
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Confidence: 90%
Published: Aug 19, 2026
Last Modified: Aug 19, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.