A flaw has been found in code-projects Patient Record Management System 1.0. This affects an unknown function of the file /fecalysis_not.php. This manipulation of the argument comp_id causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.
References
| Link | Resource |
|---|---|
| https://code-projects.org/ | Product |
| https://github.com/1768161086/sql_cve | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.346652 | Permissions Required VDB Entry |
| https://vuldb.com/?id.346652 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.754407 | Third Party Advisory VDB Entry |
Configurations
History
23 Feb 2026, 20:19
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://code-projects.org/ - Product | |
| References | () https://github.com/1768161086/sql_cve - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.346652 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.346652 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.754407 - Third Party Advisory, VDB Entry | |
| First Time |
Code-projects
Code-projects patient Record Management System |
|
| CPE | cpe:2.3:a:code-projects:patient_record_management_system:1.0:*:*:*:*:*:*:* |
19 Feb 2026, 07:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-19 07:17
Updated : 2026-02-23 20:19
NVD link : CVE-2026-2706
Mitre link : CVE-2026-2706
CVE.ORG link : CVE-2026-2706
JSON object : View
Products Affected
code-projects
- patient_record_management_system