Vulnerability Description
A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the function User::login of the file includes/users/UsersController.php of the component User Login Handler. This manipulation of the argument email causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://code-projects.org/
- https://github.com/niaoniaollll/cve/issues/6
- https://vuldb.com/cve/CVE-2026-76574
- https://vuldb.com/submit/877784
- https://vuldb.com/vuln/393038
- https://vuldb.com/vuln/393038/cti
FAQ
What is CVE-2026-76574?
CVE-2026-76574 is a vulnerability with a CVSS score of 7.3 (HIGH). A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the function User::login of the file includes/users/UsersController.php of the component User Login Hand...
How severe is CVE-2026-76574?
CVE-2026-76574 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-76574?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.