CVE-2024-0364: PHPGurukul Hospital Management System query-details.php sql injection
A vulnerability, which was classified as critical, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file admin/query-details.php. The manipulation of the argument adminremark leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250131.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0364?
CVE-2024-0364 is classified as a critical vulnerability.
How does CVE-2024-0364 affect PHPGurukul Hospital Management System?
CVE-2024-0364 allows SQL injection through manipulation of the adminremark argument in admin/query-details.php.
What is the primary attack vector for CVE-2024-0364?
The primary attack vector for CVE-2024-0364 is remote exploitation via crafted requests to the admin/query-details.php file.
How can I fix CVE-2024-0364 in PHPGurukul Hospital Management System?
To fix CVE-2024-0364, sanitize and validate user inputs in the adminremark parameter in admin/query-details.php.
Is CVE-2024-0364 publicly disclosed?
Yes, CVE-2024-0364 has been disclosed to the public and is actively being targeted.