CVE-2024-7751: SourceCodester Clinics Patient Management System update_medicine.php sql injection
A vulnerability was found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /updatemedicine.php. The manipulation of the argument hiddenid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7751?
CVE-2024-7751 is classified as a critical severity vulnerability.
How does CVE-2024-7751 affect the system?
CVE-2024-7751 allows for SQL injection through the manipulation of the hidden_id argument in the /update_medicine.php file.
What versions are affected by CVE-2024-7751?
CVE-2024-7751 affects version 1.0 of the Oretnom23 Clinic's Patient Management System.
How do I fix CVE-2024-7751?
To fix CVE-2024-7751, sanitize and validate all inputs in the /update_medicine.php file to prevent SQL injection.
Is there a workaround for CVE-2024-7751?
As a workaround for CVE-2024-7751, restrict access to the /update_medicine.php file until a patch or fix is available.