CVE-2026-7632

HIGH

code-projects Online Hospital Management System viewappointment.php sql injection

Title source: cna
STIX 2.1

Description

A vulnerability was determined in code-projects Online Hospital Management System 1.0. This affects an unknown function of the file /viewappointment.php. This manipulation of the argument delid causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

References (6)

Core 6
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-360578 | code-projects Online Hospital Management System viewappointment.php sql injection
https://vuldb.com/vuln/360578
Signature, Permissions Required signature permissions-required
VDB-360578 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/360578/cti
Third Party Advisory third-party-advisory
Submit #806633 | code-projects Online Hospital Management System In PHP 1.0 SQL Injection
https://vuldb.com/submit/806633
Product product
https://code-projects.org/

Scores

CVSS v3 7.3
EPSS 0.0004
EPSS Percentile 13.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-74 CWE-89
Status published
Products (1)
code-projects/Online Hospital Management System 1.0
Published May 02, 2026
Tracked Since May 02, 2026