Vulnerability Description
Code-Projects Online Hospital Management System V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to manipulate the SQL queries executed by the application. The application fails to properly validate user-supplied input in the login id and password fields during the login process, enabling an attacker to inject malicious SQL code.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Online Hospital Management System Project | Online Hospital Management System | 1.0 |
Related Weaknesses (CWE)
References
- https://code-projects.org/online-hospital-management-system-in-php-with-source-cProduct
- https://github.com/Mr-Secure-Code/My-CVE/blob/main/CVE-2023-37069-Exploit.mdExploitThird Party Advisory
- https://github.com/riteshs4hu/My-CVE/blob/main/CVE-2023-37069-Exploit.md
- https://code-projects.org/online-hospital-management-system-in-php-with-source-cProduct
- https://github.com/Mr-Secure-Code/My-CVE/blob/main/CVE-2023-37069-Exploit.mdExploitThird Party Advisory
FAQ
What is CVE-2023-37069?
CVE-2023-37069 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Code-Projects Online Hospital Management System V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to manipulate the SQL queries executed by the application. The application f...
How severe is CVE-2023-37069?
CVE-2023-37069 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2023-37069?
Check the references section above for vendor advisories and patch information. Affected products include: Online Hospital Management System Project Online Hospital Management System.