CVE-2022-24136: Malicious File Upload
Published Mar 31, 2022
·Updated
Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it.
Affected Software
1 affected component
Hospital Management System Project Hospital Management System=1.0
Event History
Mar 31, 2022
CVE Published
via MITRE·10:27 AM
Data Sourced
via MITRE·10:27 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID of the Hospital Management System?
The vulnerability ID is CVE-2022-24136.
2
What is the title of the vulnerability for the Hospital Management System?
The title of the vulnerability is 'Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulnerability in treatmentrecord.php.'
3
What is the severity of the Hospital Management System vulnerability?
The severity of the vulnerability is critical with a CVSS score of 9.8.
4
What is the affected software for the Hospital Management System vulnerability?
The affected software is Hospital Management System v1.0.
5
Is there a fix available for the Hospital Management System vulnerability?
A fix for the vulnerability has not been specified in the provided information. It is recommended to follow the guidelines provided by the software vendor or developer.