CVE-2024-32167

CRITICAL

Sourcecodester Online Medicine Ordering System 1.0 - Info Disclosure

Title source: llm
STIX 2.1

Description

Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Arbitrary file deletion vulnerability as the backend settings have the function of deleting pictures to delete any files.

References (1)

Core 1

Scores

CVSS v3 9.1
EPSS 0.0015
EPSS Percentile 35.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

Status published
Products (1)
oretnom23/online_medicine_ordering_system 1.0
Published Jun 10, 2024
Tracked Since Feb 18, 2026