CVE-2024-25217

Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/view_product.
Configurations

Configuration 1 (hide)

cpe:2.3:a:oretnom23:online_medicine_ordering_system:1.0:*:*:*:*:*:*:*

History

23 Oct 2024, 18:08

Type Values Removed Values Added
CWE CWE-89
References () https://github.com/BurakSevben/CVEs/blob/main/Online%20Medicine%20Ordering%20System/OMOS%20-%20SQL%20Injection%28Unauthenticated%29.md - () https://github.com/BurakSevben/CVEs/blob/main/Online%20Medicine%20Ordering%20System/OMOS%20-%20SQL%20Injection%28Unauthenticated%29.md - Exploit, Third Party Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8
First Time Oretnom23
Oretnom23 online Medicine Ordering System
CPE cpe:2.3:a:oretnom23:online_medicine_ordering_system:1.0:*:*:*:*:*:*:*

14 Feb 2024, 16:13

Type Values Removed Values Added
New CVE

Information

Published : 2024-02-14 15:15

Updated : 2024-10-23 18:08


NVD link : CVE-2024-25217

Mitre link : CVE-2024-25217

CVE.ORG link : CVE-2024-25217


JSON object : View

Products Affected

oretnom23

  • online_medicine_ordering_system
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')