CVE-2026-6005

MEDIUM

code-projects Patient Record Management System hematology_print.php sql injection

Title source: cna

Description

A flaw has been found in code-projects Patient Record Management System 1.0. The affected element is an unknown function of the file /hematology_print.php. Executing a manipulation of the argument hem_id can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.

References (5)

Scores

CVSS v3 6.3
EPSS 0.0003
EPSS Percentile 9.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Details

CWE
CWE-74 CWE-89
Status published
Products (1)
code-projects/Patient Record Management System 1.0
Published Apr 10, 2026
Tracked Since Apr 10, 2026