CVE-2024-7752: SourceCodester Clinics Patient Management System update_medicine.php cross site scripting
A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /updatemedicine.php. The manipulation of the argument medicinename leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7752?
CVE-2024-7752 is classified as a problematic vulnerability.
How does CVE-2024-7752 exploit the system?
CVE-2024-7752 allows for cross-site scripting through the manipulation of the medicine_name argument in the /update_medicine.php file.
Which software versions are affected by CVE-2024-7752?
CVE-2024-7752 affects the Oretnom23 Clinic's Patient Management System version 1.0.
How do I mitigate CVE-2024-7752?
To mitigate CVE-2024-7752, validate and sanitize input data for the medicine_name parameter.
What is the impact of CVE-2024-7752 on user data?
CVE-2024-7752 could lead to unauthorized access and manipulation of user data through cross-site scripting.