First published: Thu Sep 28 2017(Updated: )
Mojoomla Hospital Management System for WordPress allows SQL Injection via the id parameter.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Dasinfomedia Hospital Management System |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-14846 has been rated as a medium severity vulnerability due to the risk of SQL Injection.
To fix CVE-2017-14846, ensure that you update the Mojoomla Hospital Management System to the latest version that addresses this SQL Injection vulnerability.
Exploiting CVE-2017-14846 can allow attackers to execute arbitrary SQL queries, potentially compromising sensitive data stored in the database.
CVE-2017-14846 affects all versions of the Mojoomla Hospital Management System prior to the security fix.
Yes, there is a known exploit for CVE-2017-14846 that demonstrates the SQL Injection vulnerability via the id parameter.