ByteOS Network

NVD Vulnerability Details :

CVE-2026-13497

Received

Source-cna@vuldb.com

Published At-28 Jun, 2026 | 13:16

Updated At-29 Jun, 2026 | 14:16

A vulnerability was determined in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /appointment.php. This manipulation of the argument editid causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	2.1	LOW	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Secondary	3.1	6.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Secondary	2.0	6.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:P
			N/A

Type: Secondary

Version: 4.0

Base score: 2.1

Base severity: LOW

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Type: Secondary

Version: 3.1

Base score: 6.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Type: Secondary

Version: 2.0

Base score: 6.5

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:S/C:P/I:P/A:P

Type: N/A

Version:

Base score:

Base severity: N/A

Vector:

Weaknesses

CWE ID	Type	Source
CWE-74	Secondary	cna@vuldb.com
CWE-89	Secondary	cna@vuldb.com

CWE ID: CWE-74

Type: Secondary

Source: cna@vuldb.com

CWE ID: CWE-89

Type: Secondary

Source: cna@vuldb.com

References

Hyperlink	Source	Resource
https://github.com/ltranquility/vuln_submit/issues/19	cna@vuldb.com	N/A
https://itsourcecode.com/	cna@vuldb.com	N/A
https://vuldb.com/cve/CVE-2026-13497	cna@vuldb.com	N/A
https://vuldb.com/submit/838502	cna@vuldb.com	N/A
https://vuldb.com/vuln/374492	cna@vuldb.com	N/A
https://vuldb.com/vuln/374492/cti	cna@vuldb.com	N/A