{"id":"CVE-2026-7631","state":"PUBLISHED","title":"code-projects Online Hospital Management System Registration improper authorization","description":"A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted element is an unknown function of the component Registration Handler. The manipulation of the argument Username results in improper authorization. The attack can be executed remotely. The exploit has been made public and could be used.","publishedAt":"2026-05-02T13:30:12.229Z","updatedAt":"2026-05-04T17:51:26.901Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["code-projects Online Hospital Management System"],"affected":[{"vendor":"code-projects","product":"Online Hospital Management System","versions":[{"version":"1.0","status":"affected"}],"modules":["Registration Handler"]}],"references":["https://vuldb.com/vuln/360577","https://vuldb.com/vuln/360577/cti","https://vuldb.com/submit/806565","https://github.com/MyMySSS/CVE123/blob/main/cve2/cve2.md","https://code-projects.org/"],"weaknesses":["CWE-285","CWE-266"],"ingestedAt":"2026-10-29T20:13:07.220Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/7xxx/CVE-2026-7631.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-7631","state":"PUBLISHED","datePublished":"2026-05-02T13:30:12.229Z","dateUpdated":"2026-05-04T17:51:26.901Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-05-01T14:31:17.712Z"},"containers":{"cna":{"title":"code-projects Online Hospital Management System Registration improper authorization","descriptions":[{"lang":"en","value":"A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted element is an unknown function of the component Registration Handler. The manipulation of the argument Username results in improper authorization. The attack can be executed remotely. The exploit has been made public and could be used."}],"affected":[{"vendor":"code-projects","product":"Online Hospital Management System","versions":[{"version":"1.0","status":"affected"}],"modules":["Registration Handler"]}],"references":[{"url":"https://vuldb.com/vuln/360577","name":"VDB-360577 | code-projects Online Hospital Management System Registration improper authorization","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/360577/cti","name":"VDB-360577 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/submit/806565","name":"Submit #806565 | Code-projects Online Hospital Management System V1.0 unauthorized access","tags":["third-party-advisory"]},{"url":"https://github.com/MyMySSS/CVE123/blob/main/cve2/cve2.md","tags":["exploit"]},{"url":"https://code-projects.org/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":5.4,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":5.4,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":5.5,"vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-285","type":"CWE","lang":"en","description":"Improper Authorization"}]},{"descriptions":[{"cweId":"CWE-266","type":"CWE","lang":"en","description":"Incorrect Privilege Assignment"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-05-02T13:30:12.229Z"},"timeline":[{"time":"2026-05-01T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-05-01T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-05-01T16:36:23.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"MyMy (VulDB User)","type":"reporter"}],"tags":["x_freeware"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-04T16:19:44.348913Z","id":"CVE-2026-7631","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-04T17:51:26.901Z"}}]}}}