CVE-2026-13530 - itsourcecode Hospital Management System Appointment appointmentdetail.php sql injection

Back Back to CVE browser

MEDIUM

itsourcecode Hospital Management System Appointment appointmentdetail.php sql injection

Published Jun 29, 2026

5.3

MEDIUM

CVSS 4.0

EPSS 0.33%

Description

A vulnerability was identified in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /appointmentdetail.php of the component Appointment Handler. The manipulation of the argument editid leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.

Affected products

Vendor ITSourceCode Product Hospital Management System Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

ITSourceCode

Hospital Management System

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-89

SQL Injection

References (6)

https://github.com/Fomovet/cve/issues/1
exploitissue-tracking
https://itsourcecode.com/
product
https://vuldb.com/cve/CVE-2026-13530
third-party-advisory
https://vuldb.com/submit/841274
third-party-advisory
https://vuldb.com/vuln/374538
vdb-entrytechnical-description
https://vuldb.com/vuln/374538/cti
signaturepermissions-required

Link	Providers	Tags
https://github.com/Fomovet/cve/issues/1		exploitissue-tracking
https://itsourcecode.com/		product
https://vuldb.com/cve/CVE-2026-13530		third-party-advisory
https://vuldb.com/submit/841274		third-party-advisory
https://vuldb.com/vuln/374538		vdb-entrytechnical-description
https://vuldb.com/vuln/374538/cti		signaturepermissions-required