CVE-2024-28320: High severity hospital management system vulnerability
Insecure Direct Object References (IDOR) vulnerability in Hospital Management System 1.0 allows attackers to manipulate user parameters for unauthorized access and modifications via crafted POST request to /patient/edit-user.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-28320?
CVE-2024-28320 is considered a high severity vulnerability due to its potential for unauthorized access and data modification.
How do I fix CVE-2024-28320?
To fix CVE-2024-28320, implement proper authentication and access controls to validate user permissions before allowing access to sensitive user parameters.
What types of attacks can be executed with CVE-2024-28320?
Attackers can exploit CVE-2024-28320 to perform unauthorized account access and modifications by manipulating parameters in crafted POST requests.
Which software versions are affected by CVE-2024-28320?
CVE-2024-28320 affects version 1.0 of the Hospital Management System.
Is CVE-2024-28320 easy to exploit?
Yes, CVE-2024-28320 can be easily exploited by attackers with basic knowledge of crafting HTTP requests.