| शीर्षक | onetwothreeneth HospitalManagementSystem 9ef91ed6007314b6473110ed699dff76d158f61d Improper Authentication |
|---|
| विवरण | Affected: `php/sessions.php` (lines 1-8), included from `bones/a_assets.php` (line 1) by every admin page (`index.php`, `accounts.php`, `patient_info.php`, `transaction_details.php`, `print.php`, `edit_*.php`, ...). The only authentication check is `$id = @$_SESSION['id']; if(isset($id)){ /* nothing */ } else { to("login.php"); }` and `to()` merely executes `header("location:$url")` without calling `exit`. PHP therefore continues rendering the whole 'protected' page after sending the redirect. An unauthenticated attacker who does not follow redirects (e.g. curl) receives every admin page, including all patient records, physician records, account lists and transaction data - i.e. authentication can be completely bypassed. |
|---|
| स्रोत | ⚠️ https://github.com/onetwothreeneth/HospitalManagementSystem/issues/6 |
|---|
| उपयोगकर्ता | yukong (UID 101057) |
|---|
| सबमिशन | 07/09/2026 07:50 PM (25 दिन पहले) |
|---|
| संयम | 02/10/2026 06:24 AM (24 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 412926 [onetwothreeneth HospitalManagementSystem तक 9ef91ed6007314b6473110ed699dff76d158f61d php/sessions.php id कमजोर प्रमाणीकरण] |
|---|
| अंक | 20 |
|---|