CVE-2026-85399 | code-projects Hospital Information System 1.0 PrespController.php getSinglePresp ID sql injection

September 3, 2026 Yanac

A vulnerability has been found in code-projects Hospital Information System 1.0 and classified as critical. Affected by this vulnerability is the function getSinglePresp of the file includes/presp/PrespController.php. Performing a manipulation of the argument ID results in sql injection.

This vulnerability is identified as CVE-2026-85399. The attack can be initiated remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More