CVE-2026-86302: code-projects Hospital Information System SQL Database Backup File his.sql information disclosure
A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. Remote exploitation of the attack is possible. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The reported vector is network-based, with no privileges or user interaction required. Public exploit information is available.
Which deployments should be reviewed first?
Review code-projects Hospital Information System 1.0 deployments, especially instances where the /HIS/his.sql path may be remotely reachable. The affected functionality is identified as the SQL Database Backup File Handler.
How can I determine whether an installation may be exposed?
Confirm whether the installation is code-projects Hospital Information System 1.0 and assess whether unauthenticated remote requests can reach /HIS/his.sql. The available information does not identify a narrower configuration requirement.