CVE-2026-13520: itsourcecode Hospital Management System Appointment appointmentapproval.php sql injection

Published Jun 29, 2026

Updated

A vulnerability was determined in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /appointmentapproval.php of the component Appointment Handler. This manipulation of the argument editid causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Affected Software

1 affected component

itsourcecode Hospital Management System=1.0

Event History

Jun 29, 2026

CVE Published

via MITRE·12:45 AM

Data Sourced

via MITRE·12:45 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-13520?

The severity of CVE-2026-13520 is assessed as medium with a score of 6.3.

How do I fix CVE-2026-13520?

To fix CVE-2026-13520, update the itsourcecode Hospital Management System to the latest version that addresses the SQL injection vulnerability.

What type of vulnerability is CVE-2026-13520?

CVE-2026-13520 is classified as an SQL injection vulnerability.

Can CVE-2026-13520 be exploited remotely?

Yes, CVE-2026-13520 can be exploited remotely due to the nature of the SQL injection flaw.

What component of the itsourcecode Hospital Management System is affected by CVE-2026-13520?

CVE-2026-13520 affects the Appointment Handler component of the itsourcecode Hospital Management System, specifically in the appointmentapproval.php file.