Code Projects · Hospital Management System · CVE-2024-8944
Name of the Vulnerable Software and Affected Versions:
code-projects Hospital Management System version 1.0
Description:
A critical issue was found in the Hospital Management System, affecting an unknown part of the file check availability.php. The manipulation of the `email` argument leads to SQL injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. An attacker can manipulate the `email` field to access sensitive data.
Recommendations:
For code-projects Hospital Management System version 1.0, patch immediately and validate inputs to prevent SQL injection attacks. As a temporary workaround, consider restricting access to the `check availability.php` file until a patch is available. Avoid using the `email` argument in the affected file until the issue is resolved.