| tiêu đề | SQL Injection Vulnerability in Itsourcecode Hospital Management IT SOURCECODE V1.0 SQL Injection |
|---|
| Mô tả | Hospital Management System V1.0, an open-source medical management web system developed by IT SOURCECODE, contains a high-risk SQL injection vulnerability in its billing record creation module. The /insertbillingrecord.php interface does not filter external incoming patientid parameters. Authenticated attackers can construct malicious SQL payloads to interact with the backend MySQL database. Successful exploitation allows unauthorized data query, data tampering and other malicious operations, seriously threatening system data security and business stability. |
|---|
| Nguồn | ⚠️ https://gitee.com/gachong/vuldb_submit/issues/IJRCGZ |
|---|
| Người dùng | gachong (UID 98198) |
|---|
| Đệ trình | 01/06/2026 08:28 (cách đây 4 các tháng) |
|---|
| Kiểm duyệt | 03/07/2026 15:45 (1 month later) |
|---|
| Trạng thái | Bản sao |
|---|
| Mục VulDB | 374580 [itsourcecode Hospital Management System 1.0 /insertbillingrecord.php patientid Tiêm SQL] |
|---|
| điểm | 0 |
|---|