CVE-2024-40502

2024-07-2200:00:00

mitre

github.com

hospital management system

sql injection

asp.net mvc

remote attacker

arbitrary code

loginpage.aspx

AI Score

8.4

Confidence

Low

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

total

JSON

SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to execute arbitrary code via the btn_login_b_Click function of the Loginpage.aspx

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:hospital_management_system_project:hospital_management_system:1.0:*:*:*:*:*:*:*"
    ],
    "vendor": "hospital_management_system_project",
    "product": "hospital_management_system",
    "versions": [
      {
        "status": "affected",
        "version": "1.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]