Logo
Retour à la veille

CVE-2026-19020

Publié : 6 août 2026
Modifié : 6 août 2026
Lien officiel NVD
Score CVSS
6.3
MEDIUM

Description détaillée

A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /servicetype.php. This manipulation of the argument editid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Références et Patchs

https://github.com/ltranquility/submit_vuln/issues/11https://itsourcecode.com/https://vuldb.com/cve/CVE-2026-19020https://vuldb.com/submit/862830https://vuldb.com/vuln/386420https://vuldb.com/vuln/386420/cti

Dernières Vulnérabilités

CVE-2026-55980

A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition.

VOIR DÉTAILS

CVE-2026-55979

An improper access control check in CatchPulse's named pipe communication interface could allow an attacker to invoke CatchPulse functions. This is limited to operations that enforce more restrictive security policies.

VOIR DÉTAILS

CVE-2026-55978

An improper access control vulnerability in CatchPulse could allow a non-administrative local attacker to connect to an unrestricted kernel filter communication port and bypass CatchPulse's security policy enforcement.

VOIR DÉTAILS