Code Projects · Online Hospital Management System · CVE-2026-7632
**Name of the Vulnerable Software and Affected Versions**
code-projects Online Hospital Management System version 1.0
**Description**
A remote SQL injection exists in the '/viewappointment.php' file. The issue occurs when the `delid` argument is manipulated, allowing an attacker to execute arbitrary SQL commands.
**Recommendations**
As a temporary workaround, avoid using the `delid` parameter in the '/viewappointment.php' file until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.