CVE-2024-0264highCWE-639

CVE-2024-0264: high-severity vulnerability in SourceCodester Clinic Queuing System

SourceCodester Clinic Queuing System LoginRegistration.php authorization

Published · Updated

Follow this CVE+ Monitor Clinic Queuing System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

26Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.3epss 18%
A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /LoginRegistration.php. The manipulation of the argument formToken leads to authorization bypass. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249820.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected products
SourceCodester · Clinic Queuing System
Related CVEs — SourceCodester Clinic Queuing System

In the same product, most dangerous first.

CVE-2024-0265MEDIUMSourceCodester Clinic Queuing System GET Parameter index.php file inclusionEPSS 20.9%CVE-2024-6273MEDIUMSourceCodester Clinic Queuing System patient_side.php save_patient cross site scriptingEPSS 0.6%