A vulnerability marked as critical has been reported in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /treatmentrecord.php. The manipulation of the argument editid leads to sql injection.
This vulnerability is uniquely identified as CVE-2026-19069. The attack is possible to be carried out remotely. Moreover, an exploit is present.
