PT-2026-53244 · Itsourcecode · Online Hospital Management System

Hh-176 · Published 2026-06-29 · Updated 2026-06-29 · CVE-2026-13555

Mitre

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability was found in itsourcecode Online Hotel Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/mod users/controller.php?action=add. The manipulation of the argument Name results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-13555

Affected Products

Online Hospital Management System

References · 7

• 🔥 https://github.com/Hh-176/CVE/issues/6 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-13555 · Security Note
• https://itsourcecode.com · Note
• https://vuldb.com/vuln/374563 · Note
• https://vuldb.com/submit/843585 · Note
• https://vuldb.com/vuln/374563/cti · Note
• https://vuldb.com/cve/CVE-2026-13555 · Note