Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Rootme30

#25951of 53,622
9.8Total CVSS
Vulnerabilities · 1
PT-2024-39329
9.8
2024-09-17
Code Projects · Hospital Management System · CVE-2024-8944
Name of the Vulnerable Software and Affected Versions: code-projects Hospital Management System version 1.0 Description: A critical issue was found in the Hospital Management System, affecting an unknown part of the file check availability.php. The manipulation of the `email` argument leads to SQL injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. An attacker can manipulate the `email` field to access sensitive data. Recommendations: For code-projects Hospital Management System version 1.0, patch immediately and validate inputs to prevent SQL injection attacks. As a temporary workaround, consider restricting access to the `check availability.php` file until a patch is available. Avoid using the `email` argument in the affected file until the issue is resolved.