PT-2026-55750 · Itsourcecode · Online Hospital Management System

Vampirensa · Published 2026-07-05 · Updated 2026-07-05 · CVE-2026-14688

Mitre

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability was identified in itsourcecode Online Hotel Management System 1.0. The affected element is an unknown function of the file /admin/login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-14688

Affected Products

Online Hospital Management System

References · 7

• 🔥 https://github.com/geminipolo1991-vampire/CVE---Web/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-14688 · Security Note
• https://vuldb.com/cve/CVE-2026-14688 · Note
• https://vuldb.com/vuln/376284 · Note
• https://vuldb.com/vuln/376284/cti · Note
• https://vuldb.com/submit/846809 · Note
• https://itsourcecode.com · Note