CVE-2026-8785
Published
CVSS v3
7.3
HIGH
CVSS v2
7.5
HIGH
Affected
2
PROJECTS
Description
A flaw has been found in projectworlds hospital-management-system-in-php 1.0. Affected by this vulnerability is the function getAllPatientDetail of the file update_info.php of the component GET Parameter Handler. Executing a manipulation of the argument appointment_no can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
This is Hospital Management System Hospital management system is one of the best software that manages various activities in hospital that has 3 login features (account type) Features: 1. Front Page Slideshow 2. Login / Logout for customer. 3. Seperate login for admin (location/hms-admin) - username: admin, password: admin 4. Navigation Bar 5. Ability to Add patient detail and book appointment. 6. CSS using Twitter Bootstrap Brief overview of the technology: Front end: HTML, CSS, JavaScript HTML: HTML is used to create and save web document. E.g. Notepad/Notepad++ CSS : (Cascading Style Sheets) Create attractive Layout Bootstrap : responsive design mobile freindly site JavaScript: it is a programming language, commonly use with web browsers. Back end: PHP, MySQL PHP: Hypertext Preprocessor (PHP) is a technology that allows software developers to create dynamically generated web pages, in HTML, XML, or other document types, as per client request. PHP is open source software. MySQL: MySql is a database, widely used for accessing querying, updating, and managing data in databases. Software Requirement(any one) WAMP Server XAMPP Server MAMP Server LAMP Server Installation Steps 1. Download zip file and Unzip file on your local server. 2. Put this file inside "c:/wamp/www/" . 3. Database Configuration Open phpmyadmin Create Database named hospital. Import database hospital.sql from downloaded folder(inside database) 4. Open Your browser put inside "http://localhost/hospital-management-system-php-mysql-master" Admin Login Details Login Id: [email protected] Password: admin Doctor Login Details Login Id: [email protected] Password: admin Admin Login Details Login Id: [email protected] Password: admin
GitHub