CVE-2026-16009

Publié : 17 juillet 2026

Modifié : 17 juillet 2026

Score CVSS

6.3

MEDIUM

Description détaillée

A vulnerability was detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /prescriptionorderdetail.php. The manipulation of the argument delid results in sql injection. The attack can be launched remotely. The exploit is now public and may be used.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Références et Patchs

https://github.com/ltranquility/submit_vuln/issues/8 https://itsourcecode.com/https://vuldb.com/cve/CVE-2026-16009 https://vuldb.com/submit/856775 https://vuldb.com/vuln/379753 https://vuldb.com/vuln/379753/cti

Dernières Vulnérabilités

CVE-2026-9592

SEPPmail Secure Email Gateway & SEPPmail Cloud before version 15.0.4.2 allows an attacker to replay & hijack a user session in the GINA web portal, as the session token is disclosed inside the URL and a HTTP header.

VOIR DÉTAILS

CVE-2026-7488

Insertion of sensitive information into sent data vulnerability in IKAS Technology Inc. E-Commerce allows Retrieve Embedded Sensitive Data. This issue affects E-Commerce: through 03062026.

VOIR DÉTAILS

CVE-2026-51080

libpvestorage-perl v9.1.1 and libpve-storage-perl v8.3.7 were discovered to contain an XML External Entity (XXE) vulnerability.

VOIR DÉTAILS