CVE-2024-8555
SourceCodester Clinics Patient Management System congratulations.php redirect
- State
- Published
- Severity
- 6.9 Medium
- Published
- Sep 7, 2024
- Updated
- Sep 9, 2024
- Reserved
- Sep 6, 2024
Description
A vulnerability was found in SourceCodester Clinics Patient Management System 2.0. It has been classified as problematic. Affected is an unknown function of the file congratulations.php. The manipulation of the argument goto_page leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N | VulDB |
| 3.0 | 4.3 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N | VulDB |
| 2.0 | 5.0 Medium | AV:N/AC:L/Au:N/C:N/I:P/A:N | VulDB |
Weaknesses
- CWE-601 Open Redirect
Affected Products
| Product | Versions |
|---|---|
Clinics Patient Management SystemSourceCodester |
|
References
- VDB-276774 | SourceCodester Clinics Patient Management System congratulations.php redirectvdb-entrytechnical-description
- VDB-276774 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #402386 | SourceCodester Clinics Patient Management System 2.0 Open Redirectthird-party-advisory
- https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-Open-Redirect.mdexploit
- https://www.sourcecodester.com/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.