CVE-2026-15536

Publié : 13 juillet 2026

Modifié : 13 juillet 2026

Score CVSS

6.3

MEDIUM

Description détaillée

A vulnerability was identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /patviewprescription.php. The manipulation of the argument delid leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Références et Patchs

https://github.com/ltranquility/submit_vuln/issues/7 https://itsourcecode.com/https://vuldb.com/cve/CVE-2026-15536 https://vuldb.com/submit/855008 https://vuldb.com/vuln/377886 https://vuldb.com/vuln/377886/cti

Dernières Vulnérabilités

CVE-2026-61985

Missing Authorization vulnerability in magepeopleteam Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Car Rental Manager: from n/a through <= 1.3.7.

VOIR DÉTAILS

CVE-2026-61983

Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Church Admin: from n/a through <= 5.0.30.

VOIR DÉTAILS

CVE-2026-61977

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetSearch jet-search allows Retrieve Embedded Sensitive Data.This issue affects JetSearch: from n/a through <= 3.6.1.2.

VOIR DÉTAILS