CVE-2024-7454

NVD Published Date: August 04, 2024 at 09:15 AM

NVD Last Modified: September 07, 2024 at 12:56 PM

Download Patch

Vulnerability ID

CVE-2024-7454

Severity

CRITICAL

Severity Score

9.8

Summary

A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.0. Affected by this issue is the function patient_name of the file patients.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273548.

References

https://vuldb.com/?id.273548

https://vuldb.com/?ctiid.273548

https://vuldb.com/?submit.385005

https://github.com/lche511/cve/blob/main/sql.md

Mitigation and Patches

Exploits

https://github.com/lche511/cve/blob/main/sql.md

Metasploit Payload

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE ID

CWE-89

Recent Publish

CVE-2024-7455

CVE-2024-35143

Security Update for SQL Server 2016 Service Pack 3 CU (KB5040944)

Security Update for SQL Server 2016 Service Pack 3 GDR (KB5040946)

Security Update for SQL Server 2019 RTM CU (KB5040948)

Security Update for SQL Server 2019 RTM GDR (KB5040986)

See SecOps Solution
in action

Schedule Demo

Agentless security for your infrastructure and applications - to build faster, more securely and in a fraction of the operational cost of other solutions

CVE-2024-7454

Recent Publish

See SecOps Solution
in action

Products

Compare

Company

Resources

Try It

CVE-2024-7454

Recent Publish

See SecOps Solutionin action

Products

Compare

Company

Resources

Try It

See SecOps Solution
in action