PT-2024-16679
CVE-2024-10987
·
تاريخ النشر
2024-11-07
·
تاريخ التحديث
2024-11-13
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
code-projects E-Health Care System version 1.0
Description
A critical issue was found in the code-projects E-Health Care System, affecting an unknown functionality of the file /Doctor/user appointment.php. The manipulation of the arguments
schedule id, schedule date, schedule day, start time, end time, and booking leads to SQL injection. The attack can be launched remotely.Recommendations
For code-projects E-Health Care System version 1.0, patch immediately and validate input sanitization on the backend to prevent SQL injection attacks. As a temporary workaround, consider restricting access to the vulnerable file /Doctor/user appointment.php until a patch is available.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾