CVE-2023-4444: SourceCodester Free Hospital Management System for Small Practices edit-user.php sql injection
A vulnerability classified as critical was found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected by this vulnerability is an unknown functionality of the file vm\patient\edit-user.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237565 was assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-4444?
The severity of CVE-2023-4444 is critical with a severity value of 9.8.
What is the affected software for CVE-2023-4444?
The affected software for CVE-2023-4444 is SourceCodester Free Hospital Management System for Small Practices 1.0.
What is the CWE ID for CVE-2023-4444?
The CWE ID for CVE-2023-4444 is CWE-89.
How can I fix CVE-2023-4444?
To fix CVE-2023-4444, it is recommended to apply the latest security patches or updates provided by the software vendor.
Where can I find more information about CVE-2023-4444?
You can find more information about CVE-2023-4444 on the following references: [Link 1](https://github.com/CookedMelon/cve/tree/master/hospital/patient-edit), [Link 2](https://vuldb.com/?ctiid.237565), [Link 3](https://vuldb.com/?id.237565).