CVE-2024-8555: medium-severity vulnerability in SourceCodester Clinics Patient Management System
SourceCodester Clinics Patient Management System congratulations.php redirect
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9epss 0.6%
A vulnerability was found in SourceCodester Clinics Patient Management System 2.0. It has been classified as problematic. Affected is an unknown function of the file congratulations.php. The manipulation of the argument goto_page leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Affected products
SourceCodester · Clinics Patient Management SystemRelated CVEs — SourceCodester Clinics Patient Management System
In the same product, most dangerous first.
CVE-2022-2297MEDIUMSourceCodester Clinics Patient Management System unrestricted uploadEPSS 3.4%CVE-2022-2298HIGHSourceCodester Clinics Patient Management System Login Page index.php sql injectionEPSS 1.0%CVE-2024-7753MEDIUMSourceCodester Clinics Patient Management System user_images direct requestEPSS 0.9%CVE-2022-3120HIGHSourceCodester Clinics Patient Management System Login index.php sql injectionEPSS 0.8%CVE-2022-3122MEDIUMSourceCodester Clinics Patient Management System medicine_details.php sql injectionEPSS 0.8%CVE-2023-1035MEDIUMSourceCodester Clinics Patient Management System update_user.php sql injectionEPSS 0.7%