CVE-2023-4442: SourceCodester Free Hospital Management System for Small Practices booking-complete.php sql injection
First published: Mon Aug 21 2023(Updated: )
A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been rated as critical. This issue affects some unknown processing of the file \vm\patient\booking-complete.php. The manipulation of the argument userid/apponum/scheduleid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237563.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mayurik Free Hospital Management System For Small Practices | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this security issue?
The vulnerability ID of this security issue is CVE-2023-4442.
What is the severity rating of CVE-2023-4442?
CVE-2023-4442 has a severity rating of 9.8, which is classified as critical.
How does CVE-2023-4442 affect the SourceCodester Free Hospital Management System for Small Practices 1.0?
CVE-2023-4442 affects the SourceCodester Free Hospital Management System for Small Practices 1.0 through a SQL injection vulnerability in the file \vm\patient\booking-complete.php.
What is the CWE classification of CVE-2023-4442?
CVE-2023-4442 is classified as CWE-89, which is a vulnerability related to Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection').
Are there any references available for CVE-2023-4442?
Yes, you can find references for CVE-2023-4442 at the following links: [GitHub](https://github.com/CookedMelon/cve/tree/master/hospital/patient-book) and [VulDB](https://vuldb.com/?id.237563).
- agent/type
- agent/weakness
- agent/references
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/severity
- agent/first-publish-date
- agent/last-modified-date
- agent/event
- agent/source
- agent/author
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/free hospital management system for small practices project
- canonical/mayurik free hospital management system for small practices
- version/mayurik free hospital management system for small practices/1.0