VDB-276774 · CVE-2024-8555 · GCVE-100-276774

SourceCodester Clinics Patient Management System 2.0 congratulations.php goto_page Redirect

Wuro vulnerability wey an yi classify sey karshewa an gano shi a cikin SourceCodester Clinics Patient Management System 2.0. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, congratulations.php na cikin fayil, $software_component na cikin sashi. Ngam manipulation of the argument goto_page shi Redirect. CWE shidin ka a yi bayani matsala sai ya kai CWE-601. Gaskiya, laifi an fitar da shi 09/06/2024. Advisory ɗin ana rabawa don saukewa a github.com. Wannan rauni ana sayar da shi da suna CVE-2024-8555. Ngam yiɗi ka a tuma ndiyam ka nder layi. Tekinikal bayani ga. Kuma, exploit ɗin yana akwai. Wuro exploit ɗin an bayyana shi ga jama'a kuma za a iya amfani da shi. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á wúro huɗɗi-na-gaskiya. Wona yiwuwa a zazzage exploit a github.com. Kama 0-day, an ndiyam a wuro be $0-$5k. VulDB is the best source for vulnerability data and more expert information about this specific topic.

5 Goyarwa · 89 Datenpunkte

Furɗe	Súgá 09/06/2024 23:27	Gargadi 1/4 09/07/2024 18:06	Gargadi 2/4 09/10/2024 03:45	Gargadi 3/4 09/10/2024 16:07	Gargadi 4/4 03/11/2025 00:57
software_vendor	SourceCodester	SourceCodester	SourceCodester	SourceCodester	SourceCodester
software_name	Clinics Patient Management System	Clinics Patient Management System	Clinics Patient Management System	Clinics Patient Management System	Clinics Patient Management System
software_version	2.0	2.0	2.0	2.0	2.0
software_file	congratulations.php	congratulations.php	congratulations.php	congratulations.php	congratulations.php
software_argument	goto_page	goto_page	goto_page	goto_page	goto_page
vulnerability_cwe	CWE-601 (Redirect)	CWE-601 (Redirect)	CWE-601 (Redirect)	CWE-601 (Redirect)	CWE-601 (Redirect)
vulnerability_risk	1	1	1	1	1
cvss3_vuldb_av	N	N	N	N	N
cvss3_vuldb_ac	L	L	L	L	L
cvss3_vuldb_pr	N	N	N	N	N
cvss3_vuldb_ui	R	R	R	R	R
cvss3_vuldb_s	U	U	U	U	U
cvss3_vuldb_c	N	N	N	N	N
cvss3_vuldb_i	L	L	L	L	L
cvss3_vuldb_a	N	N	N	N	N
cvss3_vuldb_e	P	P	P	P	P
cvss3_vuldb_rc	R	R	R	R	R
advisory_url	https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-Open-Redirect.md	https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-Open-Redirect.md	https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-Open-Redirect.md	https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-Open-Redirect.md	https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-Open-Redirect.md
exploit_availability	1	1	1	1	1
exploit_publicity	1	1	1	1	1
exploit_url	https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-Open-Redirect.md	https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-Open-Redirect.md	https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-Open-Redirect.md	https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-Open-Redirect.md	https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-Open-Redirect.md
source_cve	CVE-2024-8555	CVE-2024-8555	CVE-2024-8555	CVE-2024-8555	CVE-2024-8555
cna_responsible	VulDB	VulDB	VulDB	VulDB	VulDB
software_type	Medical Device Software	Medical Device Software	Medical Device Software	Medical Device Software	Medical Device Software
cvss2_vuldb_av	N	N	N	N	N
cvss2_vuldb_ac	L	L	L	L	L
cvss2_vuldb_au	N	N	N	N	N
cvss2_vuldb_ci	N	N	N	N	N
cvss2_vuldb_ii	P	P	P	P	P
cvss2_vuldb_ai	N	N	N	N	N
cvss2_vuldb_e	POC	POC	POC	POC	POC
cvss2_vuldb_rc	UR	UR	UR	UR	UR
cvss4_vuldb_av	N	N	N	N	N
cvss4_vuldb_ac	L	L	L	L	L
cvss4_vuldb_pr	N	N	N	N	N
cvss4_vuldb_vc	N	N	N	N	N
cvss4_vuldb_vi	L	L	L	L	L
cvss4_vuldb_va	N	N	N	N	N
cvss4_vuldb_e	P	P	P	P	P
cvss2_vuldb_rl	ND	ND	ND	ND	ND
cvss3_vuldb_rl	X	X	X	X	X
cvss4_vuldb_at	N	N	N	N	N
cvss4_vuldb_ui	N	N	N	N	P
cvss4_vuldb_sc	N	N	N	N	N
cvss4_vuldb_si	N	N	N	N	N
cvss4_vuldb_sa	N	N	N	N	N
cvss2_vuldb_basescore	5.0	5.0	5.0	5.0	5.0
cvss2_vuldb_tempscore	4.3	4.3	4.3	4.3	4.3
cvss3_vuldb_basescore	4.3	4.3	4.3	4.3	4.3
cvss3_vuldb_tempscore	3.9	3.9	3.9	3.9	3.9
cvss3_meta_basescore	4.3	4.3	4.3	4.9	4.9
cvss3_meta_tempscore	3.9	4.1	4.1	4.8	4.8
cvss4_vuldb_bscore	6.9	6.9	6.9	6.9	5.3
cvss4_vuldb_btscore	5.5	5.5	5.5	5.5	2.1
advisory_date	1725573600 (09/06/2024)	1725573600 (09/06/2024)	1725573600 (09/06/2024)	1725573600 (09/06/2024)	1725573600 (09/06/2024)
price_0day	$0-$5k	$0-$5k	$0-$5k	$0-$5k	$0-$5k
cve_nvd_summary		A vulnerability was found in SourceCodester Clinics Patient Management System 2.0. It has been classified as problematic. Affected is an unknown function of the file congratulations.php. The manipulation of the argument goto_page leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.	A vulnerability was found in SourceCodester Clinics Patient Management System 2.0. It has been classified as problematic. Affected is an unknown function of the file congratulations.php. The manipulation of the argument goto_page leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.	A vulnerability was found in SourceCodester Clinics Patient Management System 2.0. It has been classified as problematic. Affected is an unknown function of the file congratulations.php. The manipulation of the argument goto_page leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.	A vulnerability was found in SourceCodester Clinics Patient Management System 2.0. It has been classified as problematic. Affected is an unknown function of the file congratulations.php. The manipulation of the argument goto_page leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
cvss3_cna_av		N	N	N	N
cvss3_cna_ac		L	L	L	L
cvss3_cna_pr		N	N	N	N
cvss3_cna_ui		R	R	R	R
cvss3_cna_s		U	U	U	U
cvss3_cna_c		N	N	N	N
cvss3_cna_i		L	L	L	L
cvss3_cna_a		N	N	N	N
cvss3_cna_basescore		4.3	4.3	4.3	4.3
cvss2_cna_av		N	N	N	N
cvss2_cna_ac		L	L	L	L
cvss2_cna_au		N	N	N	N
cvss2_cna_ci		N	N	N	N
cvss2_cna_ii		P	P	P	P
cvss2_cna_ai		N	N	N	N
cvss2_cna_basescore		5	5	5	5
cve_nvd_summaryes			Se ha encontrado una vulnerabilidad en SourceCodester Clinics Patient Management System 2.0. Se ha clasificado como problemática. Se ve afectada una función desconocida del archivo congratulations.php. La manipulación del argumento goto_page provoca una redirección abierta. Es posible lanzar el ataque de forma remota. El exploit se ha hecho público y puede utilizarse.	Se ha encontrado una vulnerabilidad en SourceCodester Clinics Patient Management System 2.0. Se ha clasificado como problemática. Se ve afectada una función desconocida del archivo congratulations.php. La manipulación del argumento goto_page provoca una redirección abierta. Es posible lanzar el ataque de forma remota. El exploit se ha hecho público y puede utilizarse.	Se ha encontrado una vulnerabilidad en SourceCodester Clinics Patient Management System 2.0. Se ha clasificado como problemática. Se ve afectada una función desconocida del archivo congratulations.php. La manipulación del argumento goto_page provoca una redirección abierta. Es posible lanzar el ataque de forma remota. El exploit se ha hecho público y puede utilizarse.
cvss3_nvd_av				N	N
cvss3_nvd_ac				L	L
cvss3_nvd_pr				N	N
cvss3_nvd_ui				R	R
cvss3_nvd_s				C	C
cvss3_nvd_c				L	L
cvss3_nvd_i				L	L
cvss3_nvd_a				N	N
cvss3_nvd_basescore				6.1	6.1

◂ Gurɗo Gumti Gada ▸

Might our Artificial Intelligence support you?

Check our Alexa App!