CVE-2023-4180

Summary

CVE-2023-4180 is a critical vulnerability affecting the SourceCodester Free Hospital Management System for Small Practices version 1.0. An attacker can exploit an unknown functionality in the file /vm/login.php through sql injection by manipulating the useremail/userpassword argument. This vulnerability allows remote attacks, and the exploit has been made public, increasing the risk of exploitation. The identifier for this vulnerability is VDB-236215.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.