CVE-2026-13520General

LOWCVSS 2.1 · LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was determined in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /appointmentapproval.php of the component Appointment Handler. This manipulation of the argument editid causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
General: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

General

1100.0%

Referenced assets1 URL

By indicator

https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-13520

Full discourse1 post

Vulmon Vulnerability Feed@VulmonFeeds91d
General
CVE-2026-13520 SQL Injection in itsourcecode Hospital Management System 1.0 Appointment Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-13520
Post summary
The snippet reports an SQL injection vulnerability in a hospital management system, but lacks detailed technical info, exploit evidence, or mitigation guidance.
00000121
4.1K followersView on X

Explore more

Back to dashboard