High severity7.3NVD Advisory· Published Sep 4, 2026

CVE-2026-85399

Description

A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is the function getSinglePresp of the file includes/presp/PrespController.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Code Projects/Hospital Information Systemllm-fuzzy
Range: 1.0

Patches

Vulnerability mechanics

References

code-projects.orgnvd
github.com/lccc-t/CVE/issues/4nvd
vuldb.com/cve/CVE-2026-85399nvd
vuldb.com/submit/894860nvd
vuldb.com/vuln/398542nvd
vuldb.com/vuln/398542/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000