Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/view_product.
References
Link | Resource |
---|---|
https://github.com/BurakSevben/CVEs/blob/main/Online%20Medicine%20Ordering%20System/OMOS%20-%20SQL%20Injection%28Unauthenticated%29.md | Exploit Third Party Advisory |
Configurations
History
23 Oct 2024, 18:08
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-89 | |
References | () https://github.com/BurakSevben/CVEs/blob/main/Online%20Medicine%20Ordering%20System/OMOS%20-%20SQL%20Injection%28Unauthenticated%29.md - Exploit, Third Party Advisory | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
First Time |
Oretnom23
Oretnom23 online Medicine Ordering System |
|
CPE | cpe:2.3:a:oretnom23:online_medicine_ordering_system:1.0:*:*:*:*:*:*:* |
14 Feb 2024, 16:13
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-02-14 15:15
Updated : 2024-10-23 18:08
NVD link : CVE-2024-25217
Mitre link : CVE-2024-25217
CVE.ORG link : CVE-2024-25217
JSON object : View
Products Affected
oretnom23
- online_medicine_ordering_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')