CVE-2024-5362: SourceCodester Online Hospital Management System departmentDoctor.php sql injection
First published: Sun May 26 2024(Updated: )
A vulnerability classified as critical has been found in SourceCodester Online Hospital Management System 1.0. Affected is an unknown function of the file departmentDoctor.php. The manipulation of the argument deptid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-266274 is the identifier assigned to this vulnerability.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SourceCodester Online Hospital Management System | ||
| Warrendaloyan Online Hospital Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-5362?
CVE-2024-5362 is classified as a critical severity vulnerability.
How does CVE-2024-5362 affect the Online Hospital Management System?
CVE-2024-5362 allows for SQL injection attacks via the deptid argument in the departmentDoctor.php file.
Who is affected by CVE-2024-5362?
CVE-2024-5362 affects users of the SourceCodester Online Hospital Management System version 1.0.
How do I fix CVE-2024-5362?
To fix CVE-2024-5362, implement input validation and parameterized queries to prevent SQL injection.
Can CVE-2024-5362 be exploited remotely?
Yes, CVE-2024-5362 can be exploited remotely if the system is accessible over the internet.
- agent/title
- agent/references
- agent/weakness
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/event
- vendor/sourcecodester
- canonical/sourcecodester online hospital management system
- vendor/warrendaloyan
- canonical/warrendaloyan online hospital management system
- version/warrendaloyan online hospital management system/1.0