Skip to content
Heist/ feed
High

kishan0725 Hospital Management System Appointment Cancellation admin-panel.php mysqli_query sql injection

Type: advisorySource: Official CVE List1 source record

A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. This affects the function mysqli_query of the file admin-panel.php of the component Appointment Cancellation Handler. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Announced Source revision 1
Original source ↗

CVE-2026-111990

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-111990

Hospital Management System

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "cpes": [
      "cpe:2.3:a:kishan0725:hospital_management_system:*:*:*:*:*:*:*:*"
    ],
    "vendor": "kishan0725",
    "modules": [
      "Appointment Cancellation Handler"
    ],
    "product": "Hospital Management System",
    "versions": [
      {
        "status": "affected",
        "version": "777fda46b77a820977a5ba616283dbfbc40bf7e1"
      }
    ]
  }
]
Related CVEs
CVE-2026-111990

Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event
#39095 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement