Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:hospitals_patient_records_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductHospitals Patient Records Management System (3b75a48d-2c60-5c34-ba11-84b0b9d2db10)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-11501 vulnerable 2026-07-29 00:23:31.289593 SourceCodester Hospitals Patient Records Management System Master.php save_patient sql injection
HIGH (7.3)
A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=save_patient. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-06-08T09:15:09.323Z
Updated: 2026-06-08T10:15:26.080Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9564 vulnerable 2026-06-08 08:08:59.034988 SourceCodester/oretnom23 Hospitals Patient Records Management System view_patient cross site scripting
LOW (2.4)
A vulnerability was found in SourceCodester/oretnom23 Hospitals Patient Records Management System 1.0. The impacted element is an unknown function of the file /admin/?page=patients/view_patient. Performing a manipulation of the argument Remarks results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been made public and could be used.
Published: 2026-05-26T16:30:12.596Z
Updated: 2026-05-26T19:29:06.698Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9356 vulnerable 2026-06-08 08:08:58.915322 SourceCodester Hospitals Patient Records Management System manage_history.php sql injection
HIGH (7.3)
A vulnerability has been found in SourceCodester Hospitals Patient Records Management System 1.0. This affects an unknown function of the file /admin/patients/manage_history.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
Published: 2026-05-24T05:00:15.219Z
Updated: 2026-05-26T17:47:25.250Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9355 vulnerable 2026-06-08 08:08:58.915198 SourceCodester Hospitals Patient Records Management System Master.php save_patient_history sql injection
HIGH (7.3)
A flaw has been found in SourceCodester Hospitals Patient Records Management System 1.0. The impacted element is an unknown function of the file /classes/Master.php?f=save_patient_history. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Published: 2026-05-24T04:45:09.803Z
Updated: 2026-05-26T13:35:21.558Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9342 vulnerable 2026-06-08 08:08:58.911649 SourceCodester Hospitals Patient Records Management System view_history.php sql injection
MEDIUM (6.3)
A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. Impacted is an unknown function of the file /admin/patients/view_history.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-05-23T22:15:10.341Z
Updated: 2026-05-27T17:28:13.574Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11468 vulnerable 2026-06-08 07:47:14.195592 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10185 vulnerable 2026-06-08 07:47:13.665970 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10184 vulnerable 2026-06-08 07:47:13.665681 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.