ByteOS Network

NVD Vulnerability Details :

CVE-2026-14774

Deferred

Source-cna@vuldb.com

Published At-05 Jul, 2026 | 23:16

Updated At-06 Jul, 2026 | 18:02

A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /paymentdischarge.php. This manipulation of the argument patientid causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	2.1	LOW	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Secondary	3.1	6.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Secondary	2.0	6.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:P
			N/A

Type: Secondary

Version: 4.0

Base score: 2.1

Base severity: LOW

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Type: Secondary

Version: 3.1

Base score: 6.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Type: Secondary

Version: 2.0

Base score: 6.5

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:S/C:P/I:P/A:P

Type: N/A

Version:

Base score:

Base severity: N/A

Vector:

Weaknesses

CWE ID	Type	Source
CWE-74	Secondary	cna@vuldb.com
CWE-89	Secondary	cna@vuldb.com

CWE ID: CWE-74

Type: Secondary

Source: cna@vuldb.com

CWE ID: CWE-89

Type: Secondary

Source: cna@vuldb.com

References

Hyperlink	Source	Resource
https://github.com/ltranquility/submit_vuln/issues/6	cna@vuldb.com	N/A
https://itsourcecode.com/	cna@vuldb.com	N/A
https://vuldb.com/cve/CVE-2026-14774	cna@vuldb.com	N/A
https://vuldb.com/submit/850645	cna@vuldb.com	N/A
https://vuldb.com/vuln/376364	cna@vuldb.com	N/A
https://vuldb.com/vuln/376364/cti	cna@vuldb.com	N/A