A vulnerability, which was classified as critical, was found in code-projects E-Health Care System up to 1.0. This affects an unknown part of the file /Admin/consulting_detail.php. The manipulation of the argument consulting_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
References
Link | Resource |
---|---|
https://code-projects.org/ | Product |
https://github.com/1270512529/cve/blob/main/sql.md | Exploit |
https://vuldb.com/?ctiid.282909 | Permissions Required VDB Entry |
https://vuldb.com/?id.282909 | Third Party Advisory VDB Entry |
https://vuldb.com/?submit.436311 | Third Party Advisory VDB Entry |
Configurations
History
05 Nov 2024, 20:14
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 6.5
v3 : 9.8 |
First Time |
Anisha
Anisha e-health Care System |
|
Summary |
|
|
CPE | cpe:2.3:a:anisha:e-health_care_system:1.0:*:*:*:*:*:*:* | |
References | () https://code-projects.org/ - Product | |
References | () https://github.com/1270512529/cve/blob/main/sql.md - Exploit | |
References | () https://vuldb.com/?ctiid.282909 - Permissions Required, VDB Entry | |
References | () https://vuldb.com/?id.282909 - Third Party Advisory, VDB Entry | |
References | () https://vuldb.com/?submit.436311 - Third Party Advisory, VDB Entry |
03 Nov 2024, 20:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-11-03 20:15
Updated : 2024-11-05 20:14
NVD link : CVE-2024-10740
Mitre link : CVE-2024-10740
CVE.ORG link : CVE-2024-10740
JSON object : View
Products Affected
anisha
- e-health_care_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')