CVE-2026-111990 | kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1 Appointment Cancellation admin-panel.php mysqli_query ID sql injection (Issue 75)

October 17, 2026 Yanac

A vulnerability, which was classified as critical, was found in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. This affects the function mysqli_query of the file admin-panel.php of the component Appointment Cancellation Handler. Executing a manipulation of the argument ID can lead to sql injection.

The identification of this vulnerability is CVE-2026-111990. The attack may be launched remotely. Furthermore, there is an exploit available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More