← Database

CVE-2026-2706

MEDIUM CVSS: 6.3 Published: 2026-02-19 Modified: 2026-06-17

Description

A flaw has been found in code-projects Patient Record Management System 1.0. This affects an unknown function of the file /fecalysis_not.php. This manipulation of the argument comp_id causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.

Affected Platforms

Code-Projects Patient Record Management System

Weakness Type

CWE-74, CWE-89

References