First published: Mon Sep 05 2022(Updated: )
A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file medicine_details.php. The manipulation of the argument medicine leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-207854 is the identifier assigned to this vulnerability.
Credit: cna@vuldb.com cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oretnom23 Clinic\'s Patient Management System | =1.0 | |
Clinic's Patient Management System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-3122 has been rated as critical due to its potential impact on database security.
CVE-2022-3122 is an SQL injection vulnerability found in the medicine_details.php file of the Clinics Patient Management System.
To fix CVE-2022-3122, validate and sanitize all user inputs to prevent SQL injection attacks.
CVE-2022-3122 affects version 1.0 of the Clinics Patient Management System from both SourceCodester and Oretnom23.
Organizations should implement prepared statements and parameterized queries in their database interactions to mitigate CVE-2022-3122.