PT-2021-11841 · Unknown · Phpgurukul Hospital Management System
CVE-2020-35745
·
Published
2021-01-06
·
Updated
2024-02-01
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
PHPGURUKUL Hospital Management System version 4.0
Description:
The issue allows attackers to access all data of users, doctors, patients, change admin password, get appointment history and access all session logs due to improper restriction of access to
admin/dashboard.php.Recommendations:
For PHPGURUKUL Hospital Management System version 4.0, restrict access to the
admin/dashboard.php endpoint to prevent unauthorized access. As a temporary workaround, consider disabling access to admin/dashboard.php until a patch is available.Exploit
Fix
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Phpgurukul Hospital Management System