CVE-2023-4442: SourceCodester Free Hospital Management System for Small Practices booking-complete.php sql injection
A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been rated as critical. This issue affects some unknown processing of the file \vm\patient\booking-complete.php. The manipulation of the argument userid/apponum/scheduleid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237563.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this security issue?
The vulnerability ID of this security issue is CVE-2023-4442.
What is the severity rating of CVE-2023-4442?
CVE-2023-4442 has a severity rating of 9.8, which is classified as critical.
How does CVE-2023-4442 affect the SourceCodester Free Hospital Management System for Small Practices 1.0?
CVE-2023-4442 affects the SourceCodester Free Hospital Management System for Small Practices 1.0 through a SQL injection vulnerability in the file \vm\patient\booking-complete.php.
What is the CWE classification of CVE-2023-4442?
CVE-2023-4442 is classified as CWE-89, which is a vulnerability related to Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection').
Are there any references available for CVE-2023-4442?
Yes, you can find references for CVE-2023-4442 at the following links: [GitHub](https://github.com/CookedMelon/cve/tree/master/hospital/patient-book) and [VulDB](https://vuldb.com/?id.237563).