CVE-2026-19973 | itsourcecode Hospital Management System 1.0 /viewpaymentreport.php delid sql injection

A vulnerability has been found in itsourcecode Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /viewpaymentreport.php. Performing a manipulation of the argument delid results in sql injection.

This vulnerability is cataloged as CVE-2026-19973. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.