A vulnerability was determined in code-projects Online Hospital Management System 1.0. This affects an unknown function of the file /viewappointment.php. This m…

Published:

1 mei 2026 om 22:00:00

Alert date:

2 mei 2026 om 15:01:22

Source:

nvd.nist.gov

Web Technologies, Database & Storage

A SQL injection vulnerability (CVE-2026-7632) was discovered in code-projects Online Hospital Management System version 1.0. The vulnerability affects the /viewappointment.php file through manipulation of the 'delid' parameter. The flaw allows remote attackers to perform SQL injection attacks. The exploit has been publicly disclosed and is available for use, making this a high-priority security concern for affected systems.

Technical details

Mitigation steps:

Affected products:

Online Hospital Management System