Vulnerability · Published May 2, 2026 · Assigned by VulDB
CVE-2026-7631code-projects Online Hospital Management System Registration improper authorization
Medium 5.4
In plain English
A medium-severity security flaw in Online Hospital Management System from code-projects. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).
Severity (CVSS 3.1)5.4Medium
Exploit odds (30 days)0.2%top 86.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted element is an unknown function of the component Registration Handler. The manipulation of the argument Username results in improper authorization. The attack can be executed remotely. The exploit has been made public and could be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| code-projects | Online Hospital Management System | 1.0 |
Weakness: CWE-285, CWE-266 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-360577 | code-projects Online Hospital Management System Registration improper authorization vdb-entry, technical-description
- VDB-360577 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #806565 | Code-projects Online Hospital Management System V1.0 unauthorized access third-party-advisory
- https://github.com/MyMySSS/CVE123/blob/main/cve2/cve2.md exploit
- https://code-projects.org/ product