| शीर्षक | code-projects Hospital Management System 1.0 Session Fixiation |
|---|
| विवरण | The Hospital Management System uses express-session for session management with a hardcoded and weak secret string ('secret'). The secret is used to sign session cookies, ensuring the integrity of session data. A weak or hardcoded secret allows attackers to forge session cookies, potentially bypassing authentication and impersonating other users. This vulnerability can lead to unauthorized access to sensitive patient records and administrative functions. |
|---|
| स्रोत | ⚠️ https://github.com/lakshayyverma/CVE-Discovery/blob/main/Hospital%20Management%20System.md |
|---|
| उपयोगकर्ता | lakshay12311 (UID 91298) |
|---|
| सबमिशन | 10/10/2025 08:47 AM (1 वर्ष पहले) |
|---|
| संयम | 10/10/2025 03:59 PM (7 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 327932 [code-projects Hospital Management System 1.0 express-session secret कमजोर एन्क्रिप्शन] |
|---|
| अंक | 20 |
|---|