Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:online_hospital_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductOnline Hospital Management System (f167a605-b2ec-5be9-95c9-5bbf71ba73ef)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-7632 vulnerable 2026-06-08 08:08:57.496549 code-projects Online Hospital Management System viewappointment.php sql injection
HIGH (7.3)
A vulnerability was determined in code-projects Online Hospital Management System 1.0. This affects an unknown function of the file /viewappointment.php. This manipulation of the argument delid causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-05-02T13:45:11.144Z
Updated: 2026-05-04T13:46:09.187Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7631 vulnerable 2026-06-08 08:08:57.496165 code-projects Online Hospital Management System Registration improper authorization
MEDIUM (5.4)
A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted element is an unknown function of the component Registration Handler. The manipulation of the argument Username results in improper authorization. The attack can be executed remotely. The exploit has been made public and could be used.
Published: 2026-05-02T13:30:12.229Z
Updated: 2026-05-04T17:51:26.901Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10299 vulnerable 2026-06-08 07:47:13.800350 code-projects Online Hospital Management System viewdoctortimings.php resource injection
LOW (3.8)
A weakness has been identified in code-projects Online Hospital Management System 1.0. This issue affects some unknown processing of the file viewdoctortimings.php. This manipulation of the argument delid causes improper control of resource identifiers. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-06-01T22:45:09.036Z
Updated: 2026-06-02T12:27:11.023Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10209 vulnerable 2026-06-08 07:47:13.688869 code-projects Online Hospital Management System Appointment appointmentdetail.php sql injection
MEDIUM (6.3)
A vulnerability has been found in code-projects Online Hospital Management System 1.0. Affected is an unknown function of the file appointmentdetail.php of the component Appointment Handler. The manipulation of the argument editid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-06-01T00:45:08.882Z
Updated: 2026-06-03T18:12:18.809Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10208 vulnerable 2026-06-08 07:47:13.688625 code-projects Online Hospital Management System login_1.php login_user sql injection
HIGH (7.3)
A flaw has been found in code-projects Online Hospital Management System 1.php. This impacts the function login_user of the file login_1.php. Executing a manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.
Published: 2026-06-01T00:30:08.577Z
Updated: 2026-06-02T14:57:45.868Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10186 vulnerable 2026-06-08 07:47:13.675826 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.