Description
A vulnerability was found in SourceCodesters Clinics Patient Management System 2.0. It has been rated as critical. This issue affects some unknown processing of the file /print_diseases.php. The manipulation of the argument disease/from/to leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SourceCodesters | Clinics Patient Management System | 2.0 | — |
References
- VDB-276785 | SourceCodesters Clinics Patient Management System print_diseases.php sql injection vdb-entry technical-description
- VDB-276785 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #402425 | SourceCodester Clinics Patient Management System 2.0 SQL Injection third-party-advisory
- https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-SQLi.md exploit