CVE-2024-11675: CodeAstro Hospital Management System Add Patient Details Page his_admin_register_patient.php cross site scripting
A vulnerability has been found in CodeAstro Hospital Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /backend/admin/hisadminregisterpatient.php of the component Add Patient Details Page. The manipulation of the argument patfname/patailment/patlname/patage/patdob/patnumber/patphone/pattype/pataddr leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-11675?
CVE-2024-11675 is classified as a problematic vulnerability affecting the CodeAstro Hospital Management System 1.0.
How do I fix CVE-2024-11675?
To mitigate CVE-2024-11675, it is recommended to update or patch the CodeAstro Hospital Management System to a secured version or implement input validation and sanitization on the affected component.
What component is affected by CVE-2024-11675?
CVE-2024-11675 affects the Add Patient Details Page functionality located in the /backend/admin/his_admin_register_patient.php file.
What impact does CVE-2024-11675 have?
The vulnerability in CVE-2024-11675 allows for potential manipulation of patient data during the registration process.
Which software version is vulnerable to CVE-2024-11675?
CVE-2024-11675 specifically affects version 1.0 of the PHPGURUKUL Hospital Management System.