CVE-2026-13541: itsourcecode Hospital Management System doctorchangepassword.php sql injection
A weakness has been identified in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /doctorchangepassword.php. Executing a manipulation of the argument newpassword can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-13541?
The severity of CVE-2026-13541 is medium, with a CVSS score of 6.3.
How do I fix CVE-2026-13541?
To fix CVE-2026-13541, ensure that proper input validation and parameterized queries are implemented in the /doctorchangepassword.php file.
What kind of vulnerability is CVE-2026-13541?
CVE-2026-13541 is classified as a SQL Injection vulnerability.
Can CVE-2026-13541 be exploited remotely?
Yes, CVE-2026-13541 can be exploited remotely by manipulating the newpassword argument.
What component of the Hospital Management System is affected by CVE-2026-13541?
CVE-2026-13541 affects the /doctorchangepassword.php file in the Hospital Management System.