| tiêu đề | SourceCodester Clinics Patient Management System 2.0 SQL Injection |
|---|
| Mô tả | A Unauthenticated SQL injection vulnerability was identified in SourceCodesters Clinic's Patient Management System - PHP allow full database access
this vulnerability lies in the the print_diseases.php which use some paramter **disease/from/to** all this GET paramter is vulnerable with SQL injection any malicious threat actor can directly exploit this vulnerablity without any authentication which lead database access
Affected Project: Sourcecodester Clinic's Patient Management System - PHP 2.0
Official Website: Sourcecodester Clinic's Patient Management System
Version: 2.0
vulnerable code: /print_diseases.php
POC:
`sqlmap -u "http://192.168.95.115/print_diseases.php?from=1&to=1&disease=1" --batch`
|
|---|
| Nguồn | ⚠️ https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-SQLi.md |
|---|
| Người dùng | guru (UID 74056) |
|---|
| Đệ trình | 04/09/2024 13:46 (cách đây 2 những năm) |
|---|
| Kiểm duyệt | 07/09/2024 07:58 (3 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 276785 [SourceCodesters Clinics Patient Management System 2.0 /print_diseases.php disease/from/to Tiêm SQL] |
|---|
| điểm | 20 |
|---|