PT-2026-45197 · Code Projects · Online Hospital Management System

Yuyuyu · Published 2026-05-31 · Updated 2026-05-31 · CVE-2026-10186

Mitre

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A security vulnerability has been detected in code-projects Online Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /patient.php. Such manipulation of the argument editid leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-10186

Affected Products

Online Hospital Management System

References · 7

• 🔥 https://github.com/aiyuyuyu/cve/blob/main/patient_sql.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10186 · Security Note
• https://vuldb.com/cve/CVE-2026-10186 · Note
• https://code-projects.org · Note
• https://vuldb.com/submit/819933 · Note
• https://vuldb.com/vuln/367467 · Note
• https://vuldb.com/vuln/367467/cti · Note