1. Home
  2. CVE Database
  3. CVE-2022-24136
CRITICAL · 9.8

CVE-2022-24136

Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it.

Vulnerability Description

Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Hospital Management System ProjectHospital Management System1.0

Related Weaknesses (CWE)

CWE-434

References

FAQ

What is CVE-2022-24136?

CVE-2022-24136 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php. To exploit, an attacker can upload any PHP file, and then execute it.

How severe is CVE-2022-24136?

CVE-2022-24136 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2022-24136?

Check the references section above for vendor advisories and patch information. Affected products include: Hospital Management System Project Hospital Management System.