CVE-2026-19071 in Hospital Management System

Prediction

by VulDB Data Team • 08/06/2026

A flaw has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewappointment.php. This manipulation of the argument delid causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-386540
• CPE: ready
• CWE: CWE-89 (confirmed)
• Exploit: Download
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-19071
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-19071
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-19071/