CVE-2024-7754

SourceCodester Clinics Patient Management System 1.0 contains a SQL injection vulnerability in /ajax/check_medicine_name.php via the user_name parameter. The issue is remote-exploitable and has been publicly disclosed. Several sources (including PT Security and other CVE aggregations) corroborate...

CVE-2024-7754 SourceCodester Clinics Patient Management System check_medicine_name.php sql injection

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /ajax/checkmedicinename.php. The manipulation of the argument username leads to sql injection. The attack may be initiated...

CVE-2024-7754 SourceCodester Clinics Patient Management System check_medicine_name.php sql injection

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /ajax/checkmedicinename.php. The manipulation of the argument username leads to sql injection. The attack may be initiated...

CVE-2024-7753 SourceCodester Clinics Patient Management System user_images direct request

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /userimages/. The manipulation leads to direct request. The attack can be initiated remotely. The exploit has been disclosed ...

CVE-2024-7753 SourceCodester Clinics Patient Management System user_images direct request

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /userimages/. The manipulation leads to direct request. The attack can be initiated remotely. The exploit has been disclosed ...

CVE-2024-7753

SourceCodester Clinics Patient Management System 1.0 contains a vulnerability in the /user_images/ path that can be triggered remotely via an unauthorized direct request. The issue affects unknown code in that file, and the exploit has been disclosed publicly. CVSS context in the record indicates...

SourceCodester Clinics Patient Management System 安全漏洞

SourceCodester Clinics Patient Management System is a clinic patient management system from SourceCodester, Inc. A security vulnerability exists in SourceCodester Clinics Patient Management System version 1.0, which stems from an incorrect operation that results in a direct request...

CVE-2024-7752: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /updatemedicine.php. The manipulation of the argument medicinename leads to cross site scripting. It is possible to initiate the attac...

CVE-2024-7754: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /ajax/checkmedicinename.php. The manipulation of the argument username leads to sql injection. The attack may be initiated...

CVE-2024-7753: Direct Request

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /userimages/. The manipulation leads to direct request. The attack can be initiated remotely. The exploit has been disclosed ...

SourceCodester Clinics Patient Management System SQL注入漏洞

SourceCodester Clinics Patient Management System is a clinic patient management system from SourceCodester, Inc. A SQL injection vulnerability exists in SourceCodester Clinics Patient Management System version 1.0, which stems from an incorrect manipulation of the parameter username that can lead...

CVE-2024-7752 SourceCodester Clinics Patient Management System update_medicine.php cross site scripting

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /updatemedicine.php. The manipulation of the argument medicinename leads to cross site scripting. It is possible to initiate the attac...

CVE-2024-7752 SourceCodester Clinics Patient Management System update_medicine.php cross site scripting

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /updatemedicine.php. The manipulation of the argument medicinename leads to cross site scripting. It is possible to initiate the attac...

CVE-2024-7752

The CVE-2024-7752 vulnerability affects SourceCodester Clinics Patient Management System v1.0 in the update_medicine.php component, where manipulation of the medicine_name parameter enables cross-site scripting (XSS). Exploitation is actionable remotely, and public disclosures exist. No product v...

CVE-2024-7751

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /updatemedicine.php. The manipulation of the argument hiddenid leads to sql injection. The attack may be launched remotely...

CVE-2024-7750

A vulnerability has been found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /medicines.php. The manipulation of the argument medicinename leads to sql injection. The attack can be launche...

CVE-2024-7751 SourceCodester Clinics Patient Management System update_medicine.php sql injection

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /updatemedicine.php. The manipulation of the argument hiddenid leads to sql injection. The attack may be launched remotely...

CVE-2024-7751

CVE-2024-7751 corresponds to a SQL injection in SourceCodester Clinics Patient Management System 1.0, caused by manipulation of the hidden_id parameter in the file /update_medicine.php. Connected documents corroborate a remotely launchable vulnerability with publicly disclosed exploit details. Af...

CVE-2024-7751 SourceCodester Clinics Patient Management System update_medicine.php sql injection

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /updatemedicine.php. The manipulation of the argument hiddenid leads to sql injection. The attack may be launched remotely...

CVE-2024-7750

Concrete details found: CVE-2024-7750 affects SourceCodester Clinics Patient Management System 1.0, vulnerable through /medicines.php via the medicine_name parameter leading to SQL injection. The vulnerability is exploitable remotely and exploits have been disclosed publicly. Root cause is a SQL ...