CVE-2024-10791: Codezips Hospital Appointment System doctorAction.php sql injection
A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issue affects some unknown processing of the file /doctorAction.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions contradicting file and parameter names to be affected.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10791?
CVE-2024-10791 is classified as a critical severity vulnerability.
How does CVE-2024-10791 affect the system?
CVE-2024-10791 affects the processing of the file /doctorAction.php, leading to SQL injection vulnerabilities.
Can CVE-2024-10791 be exploited remotely?
Yes, CVE-2024-10791 can be exploited remotely.
What is the main impact of CVE-2024-10791?
The main impact of CVE-2024-10791 is the potential for unauthorized access to the database due to SQL injection.
How do I fix CVE-2024-10791?
To fix CVE-2024-10791, it is recommended to sanitize user inputs and use prepared statements to prevent SQL injection.