CVE-2024-10988: code-projects E-Health Care System doctor_login.php sql injection
A vulnerability was found in code-projects E-Health Care System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Doctor/doctorlogin.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10988?
CVE-2024-10988 has been rated as critical due to its potential for SQL injection.
How do I fix CVE-2024-10988?
To fix CVE-2024-10988, ensure proper input validation and use prepared statements to prevent SQL injection in the affected file.
What functionality is affected by CVE-2024-10988?
CVE-2024-10988 affects the login functionality associated with the file /Doctor/doctor_login.php.
What is the impact of exploiting CVE-2024-10988?
Exploiting CVE-2024-10988 could allow an attacker to execute arbitrary SQL queries on the database.
Which software versions are affected by CVE-2024-10988?
CVE-2024-10988 affects version 1.0 of the Anisha E-health Care System.