CVE-2023-5587

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Oct 15, 2023
Updated: May 17, 2024
CWE ID 89

Summary

CVE-2023-5587 is a critical vulnerability affecting the SourceCodester Free Hospital Management System for Small Practices 1.0. The issue lies within the file /vm/admin/doctors.php in the Parameter Handler component. An attacker can exploit this SQL injection vulnerability by manipulating the 'search' argument. This vulnerability allows remote attacks and the exploit has been made public, increasing the risk for potential exploitation. (VDB-242186)

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share