CVE-2024-28320

The Sourcecodester Hospital Management System version 1.0 is susceptible to an Insecure Direct Object Reference (IDOR) vulnerability. Attackers can manipulate user parameters to gain unauthorized access and perform modifications by sending a crafted POST request to the /patient/edit-user.php endp...