CVE-2026-19020: itsourcecode Hospital Management System servicetype.php sql injection
A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /servicetype.php. This manipulation of the argument editid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19020?
The severity of CVE-2026-19020 is classified as medium with a score of 6.3.
How does CVE-2026-19020 affect itsourcecode Hospital Management System?
CVE-2026-19020 affects itsourcecode Hospital Management System by allowing SQL injection through the editid parameter in the /servicetype.php file.
What types of impact can occur due to CVE-2026-19020?
The impacts of CVE-2026-19020 include potential loss of confidentiality, integrity, and availability due to SQL injection exploitation.
How can I mitigate CVE-2026-19020 in my system?
To mitigate CVE-2026-19020, ensure input validation and parameterized queries are implemented to prevent SQL injection.
Is it possible to exploit CVE-2026-19020 remotely?
Yes, CVE-2026-19020 can be exploited remotely, exposing systems to the risk of SQL injection attacks.