What’s Vulnerable › Vulnerabilities

CVE-2026-85398: code-projects Hospital Information System viewReq.php viewReq sql injection

• Severity: high (CVSS 7.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-04 · updated 2026-09-04
• Weakness: CWE-74

Description

A vulnerability was identified in code-projects Hospital Information System 1.0. Affected is the function viewReq of the file viewReq.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

Affected products

• code-projects Hospital Information System: 1.0

References

• https://code-projects.org/
• https://github.com/lccc-t/CVE/issues/3
• https://vuldb.com/cve/CVE-2026-85398
• https://vuldb.com/submit/894859
• https://vuldb.com/vuln/398541
• https://vuldb.com/vuln/398541/cti

Get alerted when CVE-2026-85398 or the next vulnerability affects your stack