CVE-2026-13548

MediumCVSS 6.3/10Last modified Oct 25, 2026

Description

A vulnerability was identified in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /doctortimings.php. The manipulation of the argument editid leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-74CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jun 29, 2026
Last modified
Oct 25, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-135495.4A security flaw has been discovered in CodeAstro Complaint Management System 1.0. The affected element is the function deletereport of the fCVE-2026-13556.5A Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to upload unauthorized content to CVE-2026-135507.3A weakness has been identified in itsourcecode Baptism Information Management System 1.0. The impacted element is an unknown function of theCVE-2026-135517.3A security vulnerability has been detected in itsourcecode Baptism Information Management System 1.0. This affects an unknown function of thCVE-2026-135527.3A vulnerability was detected in itsourcecode Online Hotel Management System 1.0. This impacts an unknown function of the file /admin/mod_ameCVE-2026-135537.3A flaw has been found in itsourcecode Online Hotel Management System 1.0. Affected is an unknown function of the file /admin/mod_amenities/cCVE-2026-135544.3A vulnerability has been found in itsourcecode Online Hotel Management System 1.0. Affected by this vulnerability is an unknown functionalitCVE-2026-135557.3A vulnerability was found in itsourcecode Online Hotel Management System 1.0. Affected by this issue is some unknown functionality of the fiCVE-2026-135564.3A vulnerability was determined in itsourcecode Online Hotel Management System 1.0. This affects an unknown part of the file /admin/mod_usersCVE-2026-135574.3A vulnerability was identified in itsourcecode Online Hotel Management System 1.0. This vulnerability affects unknown code of the file /admiCVE-2026-135583.5A security flaw has been discovered in CodeAstro Complaint Management System 1.0. This issue affects some unknown processing of the file /reCVE-2026-135597.3A weakness has been identified in code-projects Real State Services 1.0. Impacted is an unknown function of the file /single-list_sale.php?a
CVE-2026-13548: Medium severity, CVSS 6.3 | Vulnix