PT-2022-16551 · Unknown · Hospital'S Patient Records Management System

Published 2022-02-24 · Updated 2022-03-03 · CVE-2022-24232

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hospital Patient Record Management System version 1.0

Description A local file inclusion issue allows attackers to execute arbitrary code via a crafted PHP file.

Recommendations For Hospital Patient Record Management System version 1.0, consider removing or restricting access to crafted PHP files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Weakness Enumeration

CWE-829

Related Identifiers

CVE-2022-24232

Affected Products

Hospital'S Patient Records Management System

References · 4

• 🔥❌ https://github.com/09-by-ly/test · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2022-24232 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-24232 · Security Note
• https://t.me/cibsecurity/38042 · Telegram Post