CVE-2026-10299— code-projects Online Hospital Management System viewdoctortimings.php resource injection
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-10299
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
code-projects Online Hospital Management System viewdoctortimings.php resource injection
Source: NVD (National Vulnerability Database)
Vulnerability Description
A weakness has been identified in code-projects Online Hospital Management System 1.0. This issue affects some unknown processing of the file viewdoctortimings.php. This manipulation of the argument delid causes improper control of resource identifiers. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
对资源描述符的控制不恰当(资源注入)
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| code-projects | Online Hospital Management System | 1.0 | cpe:2.3:a:code-projects:online_hospital_management_system:*:*:*:*:*:*:*:* |
II. Public POCs for CVE-2026-10299
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-10299
请登录查看更多情报信息。
Security Blog Posts for CVE-2026-10299 (1)
Same Patch Batch · code-projects · 2026-06-01 · 8 CVEs total
| CVE-2026-10290 | 7.3 HIGH | code-projects Hotel and Tourism Reservation System GET Parameter tour.php sql injection |
| CVE-2026-10288 | 7.3 HIGH | code-projects Hotel and Tourism Reservation System Admin Login login.php password_verify i |
| CVE-2026-10262 | 7.3 HIGH | code-projects Real State Services Login loginuser.php sql injection |
| CVE-2026-10243 | 7.3 HIGH | code-projects Smart Parking System Admin Endpoint missing authentication |
| CVE-2026-10208 | 7.3 HIGH | code-projects Online Hospital Management System login_1.php login_user sql injection |
| CVE-2026-10209 | 6.3 MEDIUM | code-projects Online Hospital Management System Appointment appointmentdetail.php sql inje |
| CVE-2026-10289 | 4.3 MEDIUM | code-projects Hotel and Tourism Reservation System tour.php cross site scripting |
IV. Related Vulnerabilities
Same product: Online Hospital Management System
- CVE-2026-10209
code-projects Online Hospital Management System Appointment - CVE-2026-10208
code-projects Online Hospital Management System login_1.php - CVE-2026-10186
code-projects Online Hospital Management System patient.php - CVE-2026-7632
code-projects Online Hospital Management System viewappointm - CVE-2026-7631
code-projects Online Hospital Management System Registration
Same vendor: code-projects
- CVE-2026-10290
code-projects Hotel and Tourism Reservation System GET Param - CVE-2026-10289
code-projects Hotel and Tourism Reservation System tour.php - CVE-2026-10288
code-projects Hotel and Tourism Reservation System Admin Log - CVE-2026-10262
code-projects Real State Services Login loginuser.php sql in - CVE-2026-10243
code-projects Smart Parking System Admin Endpoint missing au
Same weakness: CWE-99
- CVE-2026-10168
OUSL-GROUP-BrinaryBrains School Student Management System Pa - CVE-2026-9438
yashpokharna2555 StudentManagementSystem courseDel.php resou - CVE-2026-33603
Open-Xchange OX Dovecot Pro 安全漏洞 - CVE-2026-7303
Xuxueli xxl-job Execution Log JobLogController.java logDetai - CVE-2026-5414
Newgen OmniDocs WebApiRequestRedirection resource injection
V. Comments for CVE-2026-10299
No comments yet