CyberRota Analysis
AI-GeneratedThe Hospital Management System 1.0 is vulnerable to SQL injection through the `/paymentdischarge.php` file, where improper handling of the `patientid` argument allows attackers to manipulate database queries. This vulnerability can be exploited remotely, potentially leading to unauthorized access to sensitive patient data. Organizations using this system should prioritize patching or mitigating this vulnerability to protect against potential data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /paymentdischarge.php. This manipulation of the argument patientid causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.