PT-2026-45196 · Sourcecodester · Hospital'S Patient Records Management System

Zengxingqin · Published 2026-05-31 · Updated 2026-05-31 · CVE-2026-10185

NVD

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

A weakness has been identified in SourceCodester Hospitals Patient Records Management System 1.0. Affected is an unknown function of the file /classes/Users.php?f=save. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-10185

Affected Products

Hospital'S Patient Records Management System

References · 7

• 🔥 https://github.com/zzb1388/cve2/issues/3 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10185 · Security Note
• https://vuldb.com/vuln/367466 · Note
• https://vuldb.com/cve/CVE-2026-10185 · Note
• https://vuldb.com/vuln/367466/cti · Note
• https://vuldb.com/submit/819918 · Note
• https://sourcecodester.com · Note