CVE-2024-32167

CRITICAL
STIX 2.1 vulnerability

Record summary

CVE-2024-32167 has a selected CVSS score of 9.1 (critical).

Description

Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Arbitrary file deletion vulnerability as the backend settings have the function of deleting pictures to delete any files.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 17, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

online_medicine_ordering_system

Browse oretnom23 / online_medicine_ordering_system

Default status: unknown

CVE List1.0affected

References

2