CVE-2026-10208: code-projects Online Hospital Management System login_1.php login_user sql injection
A flaw has been found in code-projects Online Hospital Management System 1.php. This impacts the function loginuser of the file login1.php. Executing a manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
code-projects Online Hospital Management System login_1.phpfrom your environment.If the login_1.php component is not required, remove or disable the file from the web server to eliminate the vulnerable code path until a secure fix is deployed.
- Configuration
Modify the login_user function in login_1.php so that any SQL that uses the Username argument is executed with parameterized queries (prepared statements) and apply proper input validation and output encoding to eliminate SQL injection.
code-projects Online Hospital Management System login_1.php (function login_user) Username input handling = use parameterized queries / prepared statements and validate/sanitize input - Compensating control
Until the code is fixed, block or restrict access to the vulnerable login endpoint (login_1.php) at the network perimeter or WAF, or disable the login page to remote access to prevent exploitation.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-10208?
The severity of CVE-2026-10208 is classified as medium with a score of 5.5.
How do I fix CVE-2026-10208?
To fix CVE-2026-10208, validate and sanitize inputs in the login_user function to prevent SQL injection.
What type of attack is possible with CVE-2026-10208?
CVE-2026-10208 allows for SQL injection attacks via manipulation of the Username argument in the login_1.php file.
Can CVE-2026-10208 be exploited remotely?
Yes, CVE-2026-10208 can be exploited remotely.
Which application is affected by CVE-2026-10208?
CVE-2026-10208 affects the Code-projects Online Hospital Management System.