CVE-2026-85398
HIGH
NVD
CVSS Score
7.3
Severity
HIGH
Published
Sep 04, 2026
Vendor
unknown
Description
A vulnerability was identified in code-projects Hospital Information System 1.0. Affected is the function viewReq of the file viewReq.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.