Read the docs
TI-2026-67780 Aliases CVE-2026-105384GHSA-25v5-hfxh-3m83

SQL injection in UNION HospitalManagementSystem patient_info.php

Priority HIGH 70CWE-74Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
SQL injection
Confidentiality · integrity · availability
Low · Low · Low
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-89.

Summary

UNION HospitalManagementSystem up to and including 9ef91ed6007314b6473110ed699dff76d158f61d is affected, and the source says the product uses a rolling release, so version details cannot be specified. Improper neutralization of special elements in an SQL command (CWE-89) lets an attacker manipulate the patient_id argument in patient_info.php to inject SQL. A remote, unauthenticated attacker without user interaction can exploit it, and the exploit has been made public.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Description from the CNA

A vulnerability was found in UNION HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected is an unknown function of the file patient_info.php. Performing a manipulation of the argument patient_id results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00254 17th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
UNIONHospitalManagementSystem9ef91ed6007314b6473110ed699dff76d158f61d—No fix listedCNA
  • HospitalManagementSystem VendorUNION Affected 9ef91ed6007314b6473110ed699dff76d158f61d Fixed in — No fix listed CNA

CPE names CNA · 1

CPEVersionsRoleVendor
cpe:2.3:a:union:hospitalmanagementsystem:*:*:*:*:*:*:*:*——UNION
  • cpe:2.3:a:union:hospitalmanagementsystem:*:*:*:*:*:*:*:* Versions — — ·UNION

Remediation

The sources list no fixed version for UNION HospitalManagementSystem.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Timeline

  1. 2026-10-05 Threatist record created from CVE-2026-105384
  2. 2026-10-05 CISA SSVC decision points changed
  3. 2026-10-05 Priority changed: MEDIUM → HIGH
  4. 2026-10-05 Alias added: GHSA-25v5-hfxh-3m83

References

Exploit 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences