CVE-2026-10185: medium-severity vulnerability in SourceCodester Hospitals Patient Records…
SourceCodester Hospitals Patient Records Management System Users.php save sql injection
Published · Updated
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 6.9epss 0.3%
exploitation probability
0.3%top 82% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
A weakness has been identified in SourceCodester Hospitals Patient Records Management System 1.0. Affected is an unknown function of the file /classes/Users.php?f=save. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
SourceCodester · Hospitals Patient Records Management Systempublic PoCs found — 1
cve_referencegithub.com/zzb1388/cve2/issues/3unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — SourceCodester Hospitals Patient Records…
In the same product, most dangerous first.
CVE-2026-9356MEDIUMSourceCodester Hospitals Patient Records Management System manage_history.php sql injectionEPSS 0.4%CVE-2026-9355MEDIUMSourceCodester Hospitals Patient Records Management System Master.php save_patient_history sql injectionEPSS 0.4%CVE-2026-9564MEDIUMSourceCodester/oretnom23 Hospitals Patient Records Management System view_patient cross site scriptingEPSS 0.4%CVE-2026-9342MEDIUMSourceCodester Hospitals Patient Records Management System view_history.php sql injectionEPSS 0.3%CVE-2026-10184MEDIUMSourceCodester Hospitals Patient Records Management System Users.php delete sql injectionEPSS 0.3%CVE-2026-11501MEDIUMSourceCodester Hospitals Patient Records Management System Master.php save_patient sql injectionEPSS 0.3%