Hospital Management Center appointment.php 跨网站请求伪造

在Hospital Management Center中曾发现分类为棘手的漏洞。 受此漏洞影响的是未知功能文件：appointment.php。 手动调试的不合法输入可导致 跨网站请求伪造。 漏洞的CWE定义是 CWE-352。 此漏洞的脆弱性 2022-11-16所披露。 阅读公告的网址是github.com。 该漏洞被称作为CVE-2022-4013， 攻击可能远程发起， 有技术细节可用。 此外还有一个漏洞可利用。 该漏洞利用已公开，可能会被利用。 当前漏洞利用的价值为美元大约是$0-$5k 。 它被宣布为proof-of-concept。 可以在github.com下载该漏洞利用。 我们估计的零日攻击价值约为$0-$5k。 该漏洞被披露后，此前未曾发表过可能的缓解措施。

字段2022-11-16 08時53分2022-12-19 09時56分2022-12-19 10時00分
nameHospital Management CenterHospital Management CenterHospital Management Center
fileappointment.phpappointment.phpappointment.php
cwe352 (跨网站请求伪造)352 (跨网站请求伪造)352 (跨网站请求伪造)
risk111
cvss3_vuldb_avNNN
cvss3_vuldb_acLLL
cvss3_vuldb_prNNN
cvss3_vuldb_uiRRR
cvss3_vuldb_sUUU
cvss3_vuldb_cNNN
cvss3_vuldb_iLLL
cvss3_vuldb_aNNN
cvss3_vuldb_ePPP
cvss3_vuldb_rcRRR
urlhttps://github.com/golamsarwar08/hms/issues/2https://github.com/golamsarwar08/hms/issues/2https://github.com/golamsarwar08/hms/issues/2
availability111
publicity111
urlhttps://github.com/golamsarwar08/hms/issues/2https://github.com/golamsarwar08/hms/issues/2https://github.com/golamsarwar08/hms/issues/2
cveCVE-2022-4013CVE-2022-4013CVE-2022-4013
responsibleVulDBVulDBVulDB
date1668553200 (2022-11-16)1668553200 (2022-11-16)1668553200 (2022-11-16)
cvss2_vuldb_avNNN
cvss2_vuldb_acLLL
cvss2_vuldb_auNNN
cvss2_vuldb_ciNNN
cvss2_vuldb_iiPPP
cvss2_vuldb_aiNNN
cvss2_vuldb_ePOCPOCPOC
cvss2_vuldb_rcURURUR
cvss2_vuldb_rlNDNDND
cvss3_vuldb_rlXXX
cvss2_vuldb_basescore5.05.05.0
cvss2_vuldb_tempscore4.34.34.3
cvss3_vuldb_basescore4.34.34.3
cvss3_vuldb_tempscore3.93.93.9
cvss3_meta_basescore4.34.35.8
cvss3_meta_tempscore3.93.95.7
price_0day$0-$5k$0-$5k$0-$5k
cve_assigned1668553200 (2022-11-16)1668553200 (2022-11-16)
cve_nvd_summaryA vulnerability classified as problematic was found in Hospital Management Center. Affected by this vulnerability is an unknown functionality of the file appointment.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-213787.A vulnerability classified as problematic was found in Hospital Management Center. Affected by this vulnerability is an unknown functionality of the file appointment.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-213787.
cvss3_nvd_avN
cvss3_nvd_acL
cvss3_nvd_prN
cvss3_nvd_uiR
cvss3_nvd_sU
cvss3_nvd_cH
cvss3_nvd_iH
cvss3_nvd_aH
cvss3_cna_avN
cvss3_cna_acL
cvss3_cna_prN
cvss3_cna_uiR
cvss3_cna_sU
cvss3_cna_cN
cvss3_cna_iL
cvss3_cna_aN
cve_cnaVulDB
cvss3_nvd_basescore8.8
cvss3_cna_basescore4.3

◂ 上一步一览下一步 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!