CVE-2026-75087: itsourcecode Hospital Management System viewdepartment.php sql injection
Published Aug 18, 2026
·Updated
A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /viewdepartment.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.
Affected Software
1 affected component
itsourcecode Hospital Management System=1.0
Event History
Aug 18, 2026
CVE Published
via MITRE·12:30 AM
Data Sourced
via MITRE·12:30 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-75087?
CVE-2026-75087 has a medium severity rating of 6.3.
2
What type of vulnerability is CVE-2026-75087?
CVE-2026-75087 is classified as a SQL Injection vulnerability.
3
How does CVE-2026-75087 affect the itsourcecode Hospital Management System?
CVE-2026-75087 allows for SQL injection through manipulation of the 'delid' argument in the /viewdepartment.php file.
4
Can CVE-2026-75087 be exploited remotely?
Yes, CVE-2026-75087 can be exploited remotely.
5
How can I mitigate CVE-2026-75087?
Mitigation for CVE-2026-75087 involves sanitizing inputs in the viewdepartment.php file to prevent SQL injection.