First published: Mon Aug 21 2023(Updated: )
A vulnerability classified as critical was found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected by this vulnerability is an unknown functionality of the file vm\patient\edit-user.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237565 was assigned to this vulnerability.
Credit: cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
Mayurik Free Hospital Management System For Small Practices | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2023-4444 is critical with a severity value of 9.8.
The affected software for CVE-2023-4444 is SourceCodester Free Hospital Management System for Small Practices 1.0.
The CWE ID for CVE-2023-4444 is CWE-89.
To fix CVE-2023-4444, it is recommended to apply the latest security patches or updates provided by the software vendor.
You can find more information about CVE-2023-4444 on the following references: [Link 1](https://github.com/CookedMelon/cve/tree/master/hospital/patient-edit), [Link 2](https://vuldb.com/?ctiid.237565), [Link 3](https://vuldb.com/?id.237565).