CVE-2026-13531: itsourcecode Hospital Management System department.php sql injection
Published Jun 29, 2026
·Updated
A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /department.php. The manipulation of the argument editid results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
Affected Software
1 affected component
Hospital Management System=1.0
Event History
Jun 29, 2026
CVE Published
via MITRE·03:30 AM
Data Sourced
via MITRE·03:30 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-13531?
CVE-2026-13531 has a severity rating of low with a score of 2.1.
2
How do I fix CVE-2026-13531?
To fix CVE-2026-13531, ensure to sanitize user input in the /department.php file to prevent SQL injection.
3
What vulnerability type is CVE-2026-13531?
CVE-2026-13531 is classified as an SQL injection vulnerability.
4
Can CVE-2026-13531 be exploited remotely?
Yes, CVE-2026-13531 can be exploited remotely through manipulated arguments.
5
What impact does CVE-2026-13531 have on itsourcecode Hospital Management System?
CVE-2026-13531 can lead to unauthorized access to the database, allowing attackers to manipulate data.