Code-Projects Hospital Information System vulnerabilities

CVE-2026-85399 [HIGH] CWE-74 CVE-2026-85399: A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by th A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is the function getSinglePresp of the file includes/presp/PrespController.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and m

CVE-2026-76574 [HIGH] CWE-74 CVE-2026-76574: A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the function User::login of the file includes/users/UsersController.php of the component User Login Handler. This manipulation of the argument email causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and ma

CVE-2026-85398 [HIGH] CWE-74 CVE-2026-85398: A vulnerability was identified in code-projects Hospital Information System 1.0. Affected is the fun A vulnerability was identified in code-projects Hospital Information System 1.0. Affected is the function viewReq of the file viewReq.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

CVE-2026-85397 [HIGH] CWE-74 CVE-2026-85397: A vulnerability was determined in code-projects Hospital Information System 1.0. This impacts the fu A vulnerability was determined in code-projects Hospital Information System 1.0. This impacts the function findBySearch of the file addReq.php. This manipulation of the argument Search causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

CVE-2026-86302 [MEDIUM] CWE-200 CVE-2026-86302: A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnera A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. Remote exploitation of the attack is possible. The exploit has been made public

CVE-2026-86301 [LOW] CWE-79 CVE-2026-86301: A vulnerability has been found in code-projects Hospital Information System 1.0. Affected is an unkn A vulnerability has been found in code-projects Hospital Information System 1.0. Affected is an unknown function of the file /HIS/src/patients/editPatient.php of the component Patient Management. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may b

CVE-2023-37070 [MEDIUM] CWE-79 CVE-2023-37070: Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting (XSS) Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting (XSS)