A privilege escalation issue was found in PHP Gurukul Hospital Management System In v.4.0 allows a remote attacker to execute arbitrary code and access sensitive information via the session token parameter.
References
| Link | Resource |
|---|---|
| https://gist.github.com/captain-noob/aff11542477ddd0a92ad8b94ec75f832 | Exploit Mitigation Third Party Advisory |
| https://github.com/captain-noob | Not Applicable |
| https://twitter.com/captain__noob | Not Applicable |
| https://gist.github.com/captain-noob/aff11542477ddd0a92ad8b94ec75f832 | Exploit Mitigation Third Party Advisory |
| https://github.com/captain-noob | Not Applicable |
| https://twitter.com/captain__noob | Not Applicable |
Configurations
History
21 Nov 2024, 08:01
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gist.github.com/captain-noob/aff11542477ddd0a92ad8b94ec75f832 - Exploit, Mitigation, Third Party Advisory | |
| References | () https://github.com/captain-noob - Not Applicable | |
| References | () https://twitter.com/captain__noob - Not Applicable |
14 Nov 2023, 16:22
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Phpgurukul hospital Management System
Phpgurukul |
|
| CPE | cpe:2.3:a:phpgurukul:hospital_management_system:4.0:*:*:*:*:*:*:* |
Information
Published : 2023-05-11 11:15
Updated : 2024-11-21 08:01
NVD link : CVE-2023-31498
Mitre link : CVE-2023-31498
CVE.ORG link : CVE-2023-31498
JSON object : View
Products Affected
phpgurukul
- hospital_management_system
CWE
CWE-384
Session Fixation