PT-2026-53107 · Undefined · Undefined

Publicado 2026-06-28 · Atualizado 2026-06-28 · CVE-2026-13496

NVD

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was found in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /ajaxmedicine.php. The manipulation of the argument medicineid results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.

Correção

Special Elements Injection

SQL injection

Enumeração de Fraquezas

CWE-74

CWE-89

Identificadores relacionados

CVE-2026-13496

Produtos afetados

Undefined

Referências · 7

• https://itsourcecode.com · Nota
• https://vuldb.com/vuln/374491/cti · Nota
• https://vuldb.com/vuln/374491 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-13496 · Nota de Segurança
• https://vuldb.com/submit/838501 · Nota
• https://github.com/ltranquility/vuln_submit/issues/18 · Nota
• https://vuldb.com/cve/CVE-2026-13496 · Nota