CVE-2024-0264highCWE-639

CVE-2024-0264: falha de alta gravidade em SourceCodester Clinic Queuing System

SourceCodester Clinic Queuing System LoginRegistration.php authorization

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Clinic Queuing System

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

26Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.3epss 18%
A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /LoginRegistration.php. The manipulation of the argument formToken leads to authorization bypass. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249820.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
SourceCodester · Clinic Queuing System
CVEs relacionadas — SourceCodester Clinic Queuing System

No mesmo produto, das mais perigosas para as menos.

CVE-2024-0265MEDIUMSourceCodester Clinic Queuing System GET Parameter index.php file inclusionEPSS 20.9%CVE-2024-6273MEDIUMSourceCodester Clinic Queuing System patient_side.php save_patient cross site scriptingEPSS 0.6%