CVE-2023-3809
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
A critical vulnerability was found in Hospital Management System version 1.0. Manipulation of the 'address' argument in the patient.php file leads to SQL injection, which can be executed remotely.
Risk Assessment
This vulnerability poses a serious risk to patient data security, allowing attackers remote access to the database.
Recommendation
It is recommended to immediately update the system to the latest version and implement additional security measures to protect against SQL injection attacks.
Original NVD description (English source)
A vulnerability was found in Hospital Management System 1.0. It has been classified as critical. This affects an unknown part of the file patient.php. The manipulation of the argument address leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-235077 was assigned to this vulnerability.