CVE-2024-11073: SourceCodester Hospital Management System delete-account.php improper authorization
First published: Mon Nov 11 2024(Updated: )
A vulnerability classified as problematic has been found in SourceCodester Hospital Management System 1.0. This affects an unknown part of the file /vm/patient/delete-account.php. The manipulation of the argument id leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mayurik Hospital Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://vuldb.com/?id.283869
- https://vuldb.com/?ctiid.283869
- https://vuldb.com/?submit.440799
- https://github.com/Salah-Tayeh/CVEs-and-Vulnerabilities/blob/main/Hospital%20Management%20System%20-%20IDOR%20Causing%20Deletion%20of%20any%20patient%20account.md
- https://drive.google.com/file/d/1yFo0re8taTry7oR4-EDg3UHwO2lkqO9N/view?usp=sharing
- https://www.sourcecodester.com/
Frequently Asked Questions
What is the severity of CVE-2024-11073?
CVE-2024-11073 is classified as problematic due to improper authorization vulnerabilities.
How do I fix CVE-2024-11073?
To fix CVE-2024-11073, ensure proper access control measures are implemented for the affected delete-account.php file.
What impact does CVE-2024-11073 have on systems?
CVE-2024-11073 can allow unauthorized access to account deletion functionalities in the Hospital Management System.
Which version of the software is affected by CVE-2024-11073?
CVE-2024-11073 affects version 1.0 of the Mayurik Hospital Management System.
In which file is CVE-2024-11073 located?
CVE-2024-11073 is located in the /vm/patient/delete-account.php file.
- agent/title
- agent/references
- agent/description
- agent/type
- agent/first-publish-date
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- agent/softwarecombine
- agent/source
- vendor/mayurik
- canonical/mayurik hospital management system
- version/mayurik hospital management system/1.0