CVE-2026-78246mediumCWE-74CWE-89

CVE-2026-78246: medium-severity vulnerability in itsourcecode Online Clinic Management System

itsourcecode Online Clinic Management System Admin Login login.php sql injection

Published

Follow this CVE+ Monitor Online Clinic Management System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 6.9epss 0.4%
A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
itsourcecode · Online Clinic Management System
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — itsourcecode Online Clinic Management System

In the same product, most dangerous first.

CVE-2025-10618MEDIUMitsourcecode Online Clinic Management System transact.php sql injectionEPSS 0.5%CVE-2025-10620MEDIUMitsourcecode Online Clinic Management System editp2.php sql injectionEPSS 0.4%CVE-2025-11038MEDIUMitsourcecode Online Clinic Management System details.php sql injectionEPSS 0.3%