hosp_order — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in hosp_order, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-96552	sfturing hosp_order User Password MD5.java MD5.getMD5 hash without salt CWE-759	3.1	Low	2026-09-23
CVE-2026-96551	sfturing hosp_order CommonUserController.java cross-site request forgery CWE-352	4.3	Medium	2026-09-23
CVE-2026-96550	sfturing hosp_order MailUtil.java getProperties cleartext transmission CWE-319	3.7	Low	2026-09-23
CVE-2026-96549	sfturing hosp_order CommonUserServiceImpl.java cleartext storage CWE-312	3.3	Low	2026-09-23
CVE-2026-96548	sfturing hosp_order jdbc.properties hard-coded credentials CWE-798	5.6	Medium	2026-09-23
CVE-2026-95396	sfturing hosp_order Public Search Handlers HospitalController.java cross site scripting CWE-79	4.3	Medium	2026-09-22
CVE-2026-86263	sfturing hosp_order Order Cancellation OrderController.java orderRecordsService.cancelOrder authorization CWE-639	7.3	High	2026-09-07
CVE-2026-86262	sfturing hosp_order Order OrderController.java updateOrderdiseaseInfo authorization CWE-639	7.3	High	2026-09-07
CVE-2026-86261	sfturing hosp_order Order Controller OrderController.java authorization CWE-639	7.3	High	2026-09-07
CVE-2026-86260	sfturing hosp_order Password Recovery CommonUserController.java modifyPassWord unverified password change CWE-620	6.5	Medium	2026-09-07
CVE-2025-15450	sfturing hosp_order orderHos findOrderHosNum sql injection CWE-89	6.3	Medium	2026-01-05
CVE-2025-6768	sfturing hosp_order HospitalServiceImpl.java findAllHosByCondition sql injection CWE-89	6.3	Medium	2025-06-27
CVE-2025-6767	sfturing hosp_order DoctorServiceImpl.java findDoctorByCondition sql injection CWE-89	6.3	Medium	2025-06-27
CVE-2025-6766	sfturing hosp_order OfficeServiceImpl.java getOfficeName sql injection CWE-89	6.3	Medium	2025-06-27

All 14 known CVE vulnerabilities affecting hosp_order with full Chinese analysis, references, and POCs where available.