CVE-2024-7454

CWE-89SQL Injection3 documents3 sources
Severity
5.3MEDIUM
EPSS
0.1%
top 75.00%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedAug 4

Description

A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.0. Affected by this issue is the function patient_name of the file patients.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273548.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

🔴Vulnerability Details

2
GHSA
GHSA-vx3p-8fv9-q322: A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 12024-08-04
CVEList
SourceCodester Clinics Patient Management System patients.php patient_name sql injection2024-08-04
CVE-2024-7454 (MEDIUM CVSS 5.3) | A vulnerability | cvebase.io