Skip to content
OpenAdvisories

Product · itsourcecode

Hospital Management System

50 known vulnerabilities.

Hospital Management System at a glance

Last 12 months
50
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 10 20 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 16 vulnerabilities Jun July 2026: 15 vulnerabilities August 2026: 19 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 2026190
Jul 2026150
Jun 2026160
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

50 results · Feed

  • Medium 6.3

    itsourcecode Hospital Management System viewappointmentpending.php sql injection

    A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /viewappointmentpending.php. This manipulation of the argument delid causes sql injection. The attack is possible to be carried out remotel…

  • Medium 6.3

    itsourcecode Hospital Management System viewappointmentapproved.php sql injection

    A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /viewappointmentapproved.php. Performing a manipulation of the argument delid results in sql injection. Remote exploitation of the attack is pos…

  • Medium 6.3

    itsourcecode Hospital Management System viewbilling.php sql injection

    A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewbilling.php. Executing a manipulation of the argument delid can lead to sql injection. The attack can be launched remotely. The ex…

  • Medium 6.3

    itsourcecode Hospital Management System viewdepartment.php sql injection

    A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /viewdepartment.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exp…

  • Medium 6.3

    itsourcecode Hospital Management System viewroom.php sql injection

    A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewroom.php. Such manipulation of the argument delid leads to sql injection. It is possible to launch the attack remotely.…

  • Medium 6.3

    itsourcecode Hospital Management System viewprescriptionrecord.php sql injection

    A vulnerability was detected in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewprescriptionrecord.php. The manipulation of the argument delid results in sql injection. It is possible to launch the att…

  • Medium 6.3

    itsourcecode Hospital Management System viewpaymentreport.php sql injection

    A vulnerability was found in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewpaymentreport.php. Performing a manipulation of the argument delid results in sql injection. It is possible t…

  • Medium 6.3

    itsourcecode Hospital Management System viewpatient.php sql injection

    A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewpatient.php. Such manipulation of the argument delid leads to sql injection. The attack may be performed from remote. The exploit h…

  • Medium 6.3

    itsourcecode Hospital Management System vieworder.php sql injection

    A vulnerability has been found in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /vieworder.php. The manipulation of the argument delid leads to sql injection. The attack is possible to be carried out remotely. The e…

  • Medium 6.3

    itsourcecode Hospital Management System viewmedicine.php sql injection

    A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewmedicine.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. …

  • Medium 6.3

    itsourcecode Hospital Management System viewdoctortimings.php sql injection

    A weakness has been identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file viewdoctortimings.php. Executing a manipulation of the argument delid can lead to sql injection. The attack may be performed …

  • Medium 6.3

    itsourcecode Hospital Management System viewdoctorconsultancycharge.php sql injection

    A vulnerability was determined in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /viewdoctorconsultancycharge.php. This manipulation of the argument delid causes sql injection. The attack is possible to be…

  • Medium 6.3

    itsourcecode Hospital Management System viewdoctor.php sql injection

    A vulnerability was identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file /viewdoctor.php. Such manipulation of the argument delid leads to sql injection. The attack can be launched remotely. The exp…

  • Medium 6.3

    itsourcecode Hospital Management System viewappointment.php sql injection

    A flaw has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewappointment.php. This manipulation of the argument delid causes sql injection. It is possible to initiate the attack remotely. The exploit h…

  • Medium 6.3

    itsourcecode Hospital Management System viewadmin.php sql injection

    A vulnerability was detected in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewadmin.php. The manipulation of the argument delid results in sql injection. The attack may be performed from remote. The exploit is …

  • Medium 6.3

    itsourcecode Hospital Management System treatmentrecord.php sql injection

    A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /treatmentrecord.php. The manipulation of the argument editid leads to sql injection. The attack is possible to be carried …

  • Medium 6.3

    itsourcecode Hospital Management System treatmentdetail.php sql injection

    A weakness has been identified in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /treatmentdetail.php. Executing a manipulation of the argument patientid can lead to sql injection. The attack can be execut…

  • Medium 6.3

    itsourcecode Hospital Management System treatment.php sql injection

    A security flaw has been discovered in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /treatment.php. Performing a manipulation of the argument editid results in sql injection. Remote exploitation of the a…

  • Medium 6.3

    itsourcecode Hospital Management System servicetype.php sql injection

    A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /servicetype.php. This manipulation of the argument editid causes sql injection. It is possible to initiate t…

  • Medium 6.3

    itsourcecode Hospital Management System prescription.php sql injection

    A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /prescription.php. The manipulation of the argument editid results in sql injection. The attack can be executed remotely. The explo…

  • Medium 6.3

    itsourcecode Hospital Management System prescriptionorder.php sql injection

    A vulnerability was identified in itsourcecode Hospital Management System 1.0. This vulnerability affects unknown code of the file /prescriptionorder.php. Such manipulation of the argument editid leads to sql injection. The attack can be launched remotely. Th…

  • Medium 6.3

    itsourcecode Hospital Management System prescriptionorderreport.php sql injection

    A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /prescriptionorderreport.php. Such manipulation of the argument delid leads to sql injection. The…

  • Medium 6.3

    itsourcecode Hospital Management System prescriptionrecord.php sql injection

    A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /prescriptionrecord.php. This manipulation of the argument delid causes sql injection. It is possible to initiate the attack remotely. …

  • Medium 6.3

    itsourcecode Hospital Management System prescriptionorderdetail.php sql injection

    A vulnerability was detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /prescriptionorderdetail.php. The manipulation of the argument delid results in sql injection. The attack can be launched remotely. The ex…

  • Medium 6.3

    itsourcecode Hospital Management System patviewprescription.php sql injection

    A vulnerability was identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /patviewprescription.php. The manipulation of the argument delid leads to sql injection. Remote exploitation of the attack is possible. The…

  • Medium 6.3

    itsourcecode Hospital Management System paymentdischarge.php sql injection

    A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /paymentdischarge.php. This manipulation of the argument patientid causes sql injection. The attack may be initiated remotely. The expl…

  • Medium 6.3

    itsourcecode Hospital Management System payment.php sql injection

    A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /payment.php. The manipulation of the argument patientid results in sql injection. The attack can be launched remotely. The exploit has been…

  • Medium 6.3

    itsourcecode Hospital Management System patientreport.php sql injection

    A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /patientreport.php. Executing a manipulation of the argument editid can lead to sql injection. The attack can be launched remotely. The exp…

  • Medium 6.3

    itsourcecode Hospital Management System patientprofile.php sql injection

    A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /patientprofile.php. Performing a manipulation of the argument patientname results in sql injection. The attac…

  • Medium 6.3

    itsourcecode Hospital Management System patientlogin.php sql injection

    A vulnerability was detected in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /patientlogin.php. Performing a manipulation of the argument loginid results in sql injection. Remote exploitation of the atta…

  • Medium 6.3

    itsourcecode Hospital Management System patientorder.php sql injection

    A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /patientorder.php. Such manipulation of the argument editid leads to sql injection. The attack may be performed from remote. The exploit…

  • Medium 6.3

    itsourcecode Hospital Management System patientappointment.php sql injection

    A vulnerability has been found in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /patientappointment.php. Such manipulation of the argument patiente leads to sql injection. The attack can be launched remotely. The exp…

  • Medium 6.3

    itsourcecode Hospital Management System patient.php sql injection

    A flaw has been found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /patient.php. This manipulation of the argument editid causes sql injection. The attack may be initiated remotely. The exploit has been publishe…

  • Medium 6.3

    itsourcecode Hospital Management System medicine.php sql injection

    A flaw has been found in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /medicine.php. This manipulation of the argument editid causes sql injection. Remote exploitation of the attack is possible.…

  • Medium 6.3

    itsourcecode Hospital Management System patientchangepassword.php sql injection

    A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /patientchangepassword.php. Executing a manipulation of the argument newpassword can lead to sql injection. The att…

  • Medium 6.3

    itsourcecode Hospital Management System patientdetail.php sql injection

    A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /patientdetail.php. Performing a manipulation of the argument editid results in sql injection. The attac…

  • Medium 6.3

    itsourcecode Hospital Management System insertbillingrecord.php sql injection

    A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /insertbillingrecord.php. The manipulation of the argument patientid leads to sql injection. It is possible to initiate the …

  • Medium 6.3

    itsourcecode Hospital Management System doctortimings.php sql injection

    A vulnerability was identified in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /doctortimings.php. The manipulation of the argument editid leads to sql injection. Remote exploitation of the attack is possible. The e…

  • Medium 6.3

    itsourcecode Hospital Management System doctorprofile.php sql injection

    A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /doctorprofile.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initiate the attac…

  • Medium 6.3

    itsourcecode Hospital Management System doctorchangepassword.php sql injection

    A weakness has been identified in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /doctorchangepassword.php. Executing a manipulation of the argument newpassword can lead to sql injection. The attack may be performed …