CVE-2024-0264highCWE-639

CVE-2024-0264: fallo de gravedad alta en SourceCodester Clinic Queuing System

SourceCodester Clinic Queuing System LoginRegistration.php authorization

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Clinic Queuing System

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

26Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.3epss 18%
A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /LoginRegistration.php. The manipulation of the argument formToken leads to authorization bypass. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249820.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Productos afectados
SourceCodester · Clinic Queuing System
CVEs relacionadas — SourceCodester Clinic Queuing System

En el mismo producto, de las más peligrosas a las menos.

CVE-2024-0265MEDIUMSourceCodester Clinic Queuing System GET Parameter index.php file inclusionEPSS 20.9%CVE-2024-6273MEDIUMSourceCodester Clinic Queuing System patient_side.php save_patient cross site scriptingEPSS 0.6%