CVE-2026-13497
Medium · 6.3CVSS
6.3
EPSS
0.3%
Published
Jun 28, 2026
CISA due date
—
The record
A vulnerability was determined in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /appointment.php. This manipulation of the argument editid causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-119619 A vulnerability was found in 37954679 cak-filemanagement-system up to… CWE-74
- CVE-2026-91915 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization… CWE-74
- CVE-2026-89435 The Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes &… CWE-74
- CVE-2026-54453 OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing… CWE-74
- CVE-2026-118258 i18next-http-backend is a backend layer for i18next that loads translation resources in… CWE-74
- CVE-2026-103405 An Improper Neutralization of Special Elements in Output Used by a Downstream Component… CWE-74
- CVE-2026-103400 An Improper Neutralization of Special Elements in Output Used by a Downstream Component… CWE-74
- CVE-2026-106648 The Royal Elementor Addons WordPress plugin before 1.7.1070 does not validate submitted… CWE-74