CVE-2026-20000: itsourcecode Hospital Management System viewprescriptionrecord.php sql injection

Published Aug 17, 2026

Updated

A vulnerability was detected in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewprescriptionrecord.php. The manipulation of the argument delid results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used.

Affected Software

1 affected component

itsourcecode Hospital Management System=1.0

Event History

Aug 17, 2026

CVE Published

via MITRE·07:45 AM

Data Sourced

via MITRE·07:45 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-20000?

CVE-2026-20000 has a medium severity score of 6.3.

What type of vulnerability is CVE-2026-20000?

CVE-2026-20000 is classified as an SQL Injection vulnerability.

How do I fix CVE-2026-20000?

To fix CVE-2026-20000, ensure that input validation and parameterized queries are implemented in the affected file viewprescriptionrecord.php.

Can CVE-2026-20000 be exploited remotely?

Yes, CVE-2026-20000 can be exploited remotely through the manipulation of the delid argument.

What software is affected by CVE-2026-20000?

The vulnerability CVE-2026-20000 affects itsourcecode Hospital Management System version 1.0.