Hospital Information System
Approved changes feed: RSS · Atom
cpe:2.3:a:code-projects:hospital_information_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Code Projects (a64d3912-7513-5560-97cf-6216c4da48a5) |
|---|---|
| Product | Hospital Information System (2c2f730a-0829-57eb-afe4-ac0cc6009c16) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-85399 |
vulnerable | 2026-09-16 04:33:08.121275 |
code-projects Hospital Information System PrespController.php getSinglePresp sql injection
HIGH (7.3)
A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is the function getSinglePresp of the file includes/presp/PrespController.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-09-04T02:30:09.384Z
Updated: 2026-09-08T14:33:24.775Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86301 |
vulnerable | 2026-09-16 04:32:58.753662 |
code-projects Hospital Information System Patient Management editPatient.php cross site scripting
LOW (3.5)
A vulnerability has been found in code-projects Hospital Information System 1.0. Affected is an unknown function of the file /HIS/src/patients/editPatient.php of the component Patient Management. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-09-07T11:45:06.661Z
Updated: 2026-09-08T14:06:08.795Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86302 |
vulnerable | 2026-09-16 04:32:58.553694 |
code-projects Hospital Information System SQL Database Backup File his.sql information disclosure
MEDIUM (5.3)
A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. Remote exploitation of the attack is possible. The exploit has been made public and could be used.
Published: 2026-09-07T12:00:07.732Z
Updated: 2026-09-09T14:26:12.888Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.