CVE-2026-78112— itsourcecode Hospital Management System Project in PHP viewservicetype.php sql injection
Quick assessment
Affected
itsourcecode Hospital Management System Project in PHP
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 itsourcecode Hospital Management System Project（PHP 1.0）中发现一个缺陷。该漏洞影响了文件 /viewservicetype.php 中的一个未知函数。通过对参数 delid 的操控，可导致 SQL 注入攻击。攻击者可以从远程发起利用。该漏洞的利用代码已被公开，可能被恶意使用。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| itsourcecode | Hospital Management System Project in PHP | 1.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-78112
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
itsourcecode Hospital Management System Project in PHP viewservicetype.php sql injection
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| itsourcecode | Hospital Management System Project in PHP | 1.0 |
cpe:2.3:a:itsourcecode:hospital_management_system_project_in_php:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-78112
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-78112
请登录查看更多情报信息。
Exploits & Public PoCs for CVE-2026-78112 (1)
Proof of Concept for CVE-2026-78112 (1)
News Coverage for CVE-2026-78112 (1)
-
🔗 CVE-2026-78112 itsourcecode Hospital Management System Project in PHP viewservicetype.php sql injection Read full article vdb-entry technical-description
Other References for CVE-2026-78112 (2)
-
🔗 CVE-2026-78112 in Hospital Management System Project in PHP third-party-advisory
IV. Related Vulnerabilities
Same vendor: itsourcecode
-
CVE-2026-78656
itsourcecode Sales and Inventory System cust_del.php sql inj -
CVE-2026-78246
itsourcecode Online Clinic Management System Admin Login log -
CVE-2026-78245
itsourcecode Online Pharmacy System User Registration regist -
CVE-2026-78244
itsourcecode Real Estate Management System search.php sql in -
CVE-2026-78202
itsourcecode Payroll System admin_class.php save_settings un
Same weakness: CWE-89
-
CVE-2026-78864
liketrek TREK Journey Entry Update journey.controller.t jour -
CVE-2026-77824
Media Sweep <= 1.1.3 - Authenticated (Administrator+) SQL In -
CVE-2026-19949
All-in-One WP Migration and Backup <= 7.109 - Unauthenticate -
CVE-2026-78576
Readabler < 2.0.18 - Unauthenticated SQL Injection -
CVE-2026-77137
SQL Injection in extension "Forms Export" (frp_form_answers)
V. Comments for CVE-2026-78112
No comments yet