CVE-2024-5362

KRITISCH 9.8CVE-2024-5362 · Published 26/05/2024 · updated 17/06/2026

Kurz gesagt

CVE-2024-5362 ist eine Schwachstelle (KRITISCH (CVSS 9.8)) in online hospital management system (warrendaloyan).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.74%, höher als bei 54.6% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
online hospital management system warrendaloyan	`= 1.0`	No fix yet

Description

A vulnerability classified as critical has been found in SourceCodester Online Hospital Management System 1.0. Affected is an unknown function of the file departmentDoctor.php. The manipulation of the argument deptid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-266274 is the identifier assigned to this vulnerability.

References

CveSecLook/cve · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free