CVE-2024-11674: CodeAstro Hospital Management System his_doc_update-account.php unrestricted upload
A vulnerability, which was classified as critical, was found in CodeAstro Hospital Management System 1.0. Affected is an unknown function of the file /backend/doc/hisdocupdate-account.php. The manipulation of the argument docdpic leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-11674?
CVE-2024-11674 is classified as a critical vulnerability.
How do I fix CVE-2024-11674?
To fix CVE-2024-11674, update the CodeAstro Hospital Management System to the latest version that addresses this vulnerability.
What are the potential impacts of CVE-2024-11674?
CVE-2024-11674 allows for unrestricted uploads, potentially leading to unauthorized access and exploitation of the system.
Which versions of the Hospital Management System are affected by CVE-2024-11674?
CVE-2024-11674 affects version 1.0 of the CodeAstro Hospital Management System.
What component of the Hospital Management System is vulnerable in CVE-2024-11674?
The vulnerability in CVE-2024-11674 is found in the file /backend/doc/his_doc_update-account.php.