CVE-2026-85397
HIGH
NVD
CVSS Score
7.3
Severity
HIGH
Published
Sep 04, 2026
Vendor
unknown
Description
A vulnerability was determined in code-projects Hospital Information System 1.0. This impacts the function findBySearch of the file addReq.php. This manipulation of the argument Search causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.