Description
A vulnerability was found in SourceCodester Clinics Patient Management System 2.0. It has been classified as problematic. Affected is an unknown function of the file congratulations.php. The manipulation of the argument goto_page leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SourceCodester | Clinics Patient Management System | 2.0 | — |
References
- VDB-276774 | SourceCodester Clinics Patient Management System congratulations.php redirect vdb-entry technical-description
- VDB-276774 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #402386 | SourceCodester Clinics Patient Management System 2.0 Open Redirect third-party-advisory
- https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-Open-Redirect.md exploit
- https://www.sourcecodester.com/ product