Submeter #402425: SourceCodester Clinics Patient Management System 2.0 SQL Injection

A Unauthenticated SQL injection vulnerability was identified in SourceCodesters Clinic's Patient Management System - PHP allow full database access

this vulnerability lies in the the print_diseases.php which use some paramter **disease/from/to** all this GET paramter is vulnerable with SQL injection any malicious threat actor can directly exploit this vulnerablity without any authentication which lead database access

Affected Project: Sourcecodester Clinic's Patient Management System - PHP 2.0

Official Website: Sourcecodester Clinic's Patient Management System

Version: 2.0

vulnerable code: /print_diseases.php

POC:

`sqlmap -u "http://192.168.95.115/print_diseases.php?from=1&to=1&disease=1" --batch`

• Fonte: ⚠️ https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-SQLi.md
• Utilizador: guru (UID 74056)
• Submissão: 04/09/2024 13h46 (há 2 anos)
• Moderação: 07/09/2024 07h58 (3 days later)
• Estado: Aceite
• Entrada VulDB: 276785 [SourceCodesters Clinics Patient Management System 2.0 /print_diseases.php disease/from/to Injeção SQL]
• Pontos: 20