Skip to content

Itsourcecode · weakness class

SQL Injection

618 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 618 is a mark on the map. Named now: 469 to 494, most at risk first.

  1. itsourcecode Hospital Management System viewappointmentapproved.php sql injectionCVE-2026-76991itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  2. itsourcecode Hospital Management System viewbilling.php sql injectionCVE-2026-75088itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  3. itsourcecode Hospital Management System viewdepartment.php sql injectionCVE-2026-75087itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  4. itsourcecode Hospital Management System viewroom.php sql injectionCVE-2026-75086itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  5. itsourcecode Hospital Management System viewprescriptionrecord.php sql injectionCVE-2026-20000itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  6. itsourcecode Hospital Management System viewpaymentreport.php sql injectionCVE-2026-19973itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  7. itsourcecode Hospital Management System viewpatient.php sql injectionCVE-2026-19972itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  8. itsourcecode Hospital Management System vieworder.php sql injectionCVE-2026-19934itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  9. itsourcecode Hospital Management System viewmedicine.php sql injectionCVE-2026-19894itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  10. itsourcecode Hospital Management System viewdoctortimings.php sql injectionCVE-2026-19767itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  11. itsourcecode Hospital Management System viewdoctorconsultancycharge.php sql injectionCVE-2026-19364itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  12. itsourcecode Hospital Management System viewdoctor.php sql injectionCVE-2026-19347itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  13. itsourcecode Hospital Management System viewappointment.php sql injectionCVE-2026-19071itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  14. itsourcecode Hospital Management System viewadmin.php sql injectionCVE-2026-19070itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  15. itsourcecode Hospital Management System treatmentrecord.php sql injectionCVE-2026-19069itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  16. itsourcecode Hospital Management System treatmentdetail.php sql injectionCVE-2026-19068itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  17. itsourcecode Hospital Management System treatment.php sql injectionCVE-2026-19067itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  18. itsourcecode Hospital Management System servicetype.php sql injectionCVE-2026-19020itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  19. itsourcecode Hospital Management System prescription.php sql injectionCVE-2026-16490itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  20. itsourcecode Hospital Management System prescriptionorder.php sql injectionCVE-2026-16334itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  21. itsourcecode Hospital Management System prescriptionorderreport.php sql injectionCVE-2026-16244itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  22. itsourcecode Hospital Management System prescriptionrecord.php sql injectionCVE-2026-16131itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  23. itsourcecode Hospital Management System prescriptionorderdetail.php sql injectionCVE-2026-16009itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  24. itsourcecode Electronic Judging System add_judges.php sql injectionCVE-2026-15672itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  25. itsourcecode Hospital Management System patviewprescription.php sql injectionCVE-2026-15536itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  26. itsourcecode Hospital Management System paymentdischarge.php sql injectionCVE-2026-14774itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.