CVE-2024-7454

Name of the Vulnerable Software and Affected Versions SourceCodester Clinics Patient Management System version 1.0

Description A critical issue has been found in the function patient name of the file patients.php, leading to sql injection. The attack may be launched remotely. This issue may result in potential sensitive data exposure.

Recommendations For SourceCodester Clinics Patient Management System version 1.0, patch immediately and validate inputs to resolve the issue. As a temporary workaround, consider restricting access to the patient name function in the patients.php file until a patch is available.