CVE-2023-4185

MEDIUM

Online Hospital Management System 1.0 - SQL Injection via patientlogin.php

Title source: llm
STIX 2.1

Description

A vulnerability was found in SourceCodester Online Hospital Management System 1.0. It has been classified as critical. Affected is an unknown function of the file patientlogin.php. The manipulation of the argument loginid/password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-236220.

References (3)

Core 3
Core References
Permissions Required, Third Party Advisory vdb-entry technical-description
https://vuldb.com/?id.236220
Permissions Required, Third Party Advisory signature permissions-required
https://vuldb.com/?ctiid.236220

Scores

CVSS v3 6.3
EPSS 0.0007
EPSS Percentile 20.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Details

CWE
CWE-89
Status published
Products (1)
mayurik/online_hospital_management_system 1.0
Published Aug 06, 2023
Tracked Since Feb 18, 2026