CVE-2026-10186

Description

A security vulnerability has been detected in code-projects Online Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /patient.php. Such manipulation of the argument editid leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.

CVSS Vector

References

• https://code-projects.org/
• https://github.com/aiyuyuyu/cve/blob/main/patient_sql.md
• https://vuldb.com/cve/CVE-2026-10186
• https://vuldb.com/submit/819933
• https://vuldb.com/vuln/367467
• https://vuldb.com/vuln/367467/cti