SQL Injection Vulnerability in onetwothreeneth HospitalManagementSystem
CVE-2026-105385

6.9MEDIUM

Key Information:

Vendor: Onetwothreeneth
Status: Hospitalmanagementsystem
Vendor: CVE Published:; 5 October 2026

🔔 Create Onetwothreeneth Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-105385?

A vulnerability exists in the onetwothreeneth HospitalManagementSystem's transaction_details.php file that allows attackers to exploit SQL injection techniques via manipulation of the transaction_id argument. This flaw poses a risk for remote exploitation, making it critical for users to take precautionary measures. The issue was reported, but as of now, the vendor has not provided a public response or patch. Maintain awareness and readiness to mitigate potential impacts from this disclosed vulnerability.

Affected Version(s)

HospitalManagementSystem 9ef91ed6007314b6473110ed699dff76d158f61d

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-105385 - Proof of Concept