CVE-2024-28320

2024-04-2900:00:00

mitre

github.com

hospital management system

insecure direct object references

unauthorized access

AI Score

6.8

Confidence

Low

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

Insecure Direct Object References (IDOR) vulnerability in Hospital Management System 1.0 allows attackers to manipulate user parameters for unauthorized access and modifications via crafted POST request to /patient/edit-user.php.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:hospital_management_system_project:hospital_management_system:1.0:*:*:*:*:*:*:*"
    ],
    "vendor": "hospital_management_system_project",
    "product": "hospital_management_system",
    "versions": [
      {
        "status": "affected",
        "version": "1.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]