Vulnerabilities CVE-2026-14703

CVE-2026-14703

Medium

Open

TLP:CLEAR

itsourcecode Hospital Management System patientorder.php sql injection

NVD CVE.org

Healthcare Targeting

AI Analysis

No AI analysis yet.

Description

A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /patientorder.php. Such manipulation of the argument editid leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

Details

CVSS Score: 5.3
EPSS Score ⓘ: 0.20%

10.8th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Confidence: 90%
Published: Jul 5, 2026
Last Modified: Jul 5, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.