CVE-2026-104637: onetwothreeneth HospitalManagementSystem controller.php edit_patient unrestricted upload
A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function addpatient/addphysician/addaccount/updateaccount/updatesubaccount/editphysician/editpatient of the file php/controller.php. Executing a manipulation of the argument img can lead to unrestricted upload. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attack can be launched remotely and requires no privileges or user interaction according to the supplied severity vector. Public exploit availability is reported, which may increase the likelihood of attempted exploitation.
Which application functionality is affected?
The img argument in php/controller.php is affected in the add_patient, add_physician, add_account, update_account, update_subaccount, edit_physician, and edit_patient functions. These paths can be manipulated to perform an unrestricted upload.
How can I determine whether my deployment may be affected?
Deployments of onetwothreeneth HospitalManagementSystem should be reviewed because the issue is reported to affect the project through commit 9ef91ed6007314b6473110ed699dff76d158f61d. No affected or fixed release versions are available because the project uses a rolling release model.
Is a vendor fix available?
The provided information does not identify an updated release or a vendor fix. It states that the project was notified through an issue report but had not responded.