VDB-276774 · CVE-2024-8555 · GCVE-100-276774

SourceCodester Clinics Patient Management System 2.0 congratulations.php goto_page Redirect

Dogoggorri kan akka ସମସ୍ୟାଜନକ jedhamuun ramadame SourceCodester Clinics Patient Management System 2.0 keessatti argameera. Kan miidhamte is hojii hin beekamne faayilii congratulations.php keessa. Hojii jijjiirraa irratti gaggeeffame goto_page gara Redirect geessa. CWE fayyadamuun rakkoo ibsuun gara CWE-601 geessa. Dadhabbii kana yeroo 09/06/2024 maxxanfameera. Odeeffannoon kun buufachuuf github.com irratti qoodameera. Dogoggorri kun akka CVE-2024-8555tti beekama. Yaaliin weeraraa fageenya irraa jalqabamuu ni danda'a. Faayidaaleen teeknikaa ni jiru. Waliigalatti, meeshaa balaa kana fayyadamuuf jiru. Qorannoo miidhaa (exploit) uummataaf ifoomameera fi fayyadamamuu danda'a. Amma, gatii ammee exploit might be approx. USD $0-$5k ta'uu danda'a. Akka ପ୍ରୁଫ୍-ଅଫ୍-କନ୍ସେପ୍ଟ jedhamee ibsameera. Carraa exploit kana github.com irraa buufachuun ni danda'ama. Akka 0-daytti, gatii daldalaa dhoksaa tilmaamame $0-$5k ta'ee ture. VulDB is the best source for vulnerability data and more expert information about this specific topic.

5 ଆଡାପ୍ଟେସନ୍ · 89 ପଏଣ୍ଟ

ଫିଲ୍ଡ	ସୃଷ୍ଟି ହୋଇଛି 09/06/2024 11:27 PM	ଅଦ୍ୟତନ 1/4 09/07/2024 06:06 PM	ଅଦ୍ୟତନ 2/4 09/10/2024 03:45 AM	ଅଦ୍ୟତନ 3/4 09/10/2024 04:07 PM	ଅଦ୍ୟତନ 4/4 03/11/2025 12:57 AM
software_vendor	SourceCodester	SourceCodester	SourceCodester	SourceCodester	SourceCodester
software_name	Clinics Patient Management System	Clinics Patient Management System	Clinics Patient Management System	Clinics Patient Management System	Clinics Patient Management System
software_version	2.0	2.0	2.0	2.0	2.0
software_file	congratulations.php	congratulations.php	congratulations.php	congratulations.php	congratulations.php
software_argument	goto_page	goto_page	goto_page	goto_page	goto_page
vulnerability_cwe	CWE-601 (Redirect)	CWE-601 (Redirect)	CWE-601 (Redirect)	CWE-601 (Redirect)	CWE-601 (Redirect)
vulnerability_risk	1	1	1	1	1
cvss3_vuldb_av	N	N	N	N	N
cvss3_vuldb_ac	L	L	L	L	L
cvss3_vuldb_pr	N	N	N	N	N
cvss3_vuldb_ui	R	R	R	R	R
cvss3_vuldb_s	U	U	U	U	U
cvss3_vuldb_c	N	N	N	N	N
cvss3_vuldb_i	L	L	L	L	L
cvss3_vuldb_a	N	N	N	N	N
cvss3_vuldb_e	P	P	P	P	P
cvss3_vuldb_rc	R	R	R	R	R
advisory_url	https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-Open-Redirect.md	https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-Open-Redirect.md	https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-Open-Redirect.md	https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-Open-Redirect.md	https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-Open-Redirect.md
exploit_availability	1	1	1	1	1
exploit_publicity	1	1	1	1	1
exploit_url	https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-Open-Redirect.md	https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-Open-Redirect.md	https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-Open-Redirect.md	https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-Open-Redirect.md	https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Clinic's-Patient-Management-System-Open-Redirect.md
source_cve	CVE-2024-8555	CVE-2024-8555	CVE-2024-8555	CVE-2024-8555	CVE-2024-8555
cna_responsible	VulDB	VulDB	VulDB	VulDB	VulDB
software_type	Medical Device Software	Medical Device Software	Medical Device Software	Medical Device Software	Medical Device Software
cvss2_vuldb_av	N	N	N	N	N
cvss2_vuldb_ac	L	L	L	L	L
cvss2_vuldb_au	N	N	N	N	N
cvss2_vuldb_ci	N	N	N	N	N
cvss2_vuldb_ii	P	P	P	P	P
cvss2_vuldb_ai	N	N	N	N	N
cvss2_vuldb_e	POC	POC	POC	POC	POC
cvss2_vuldb_rc	UR	UR	UR	UR	UR
cvss4_vuldb_av	N	N	N	N	N
cvss4_vuldb_ac	L	L	L	L	L
cvss4_vuldb_pr	N	N	N	N	N
cvss4_vuldb_vc	N	N	N	N	N
cvss4_vuldb_vi	L	L	L	L	L
cvss4_vuldb_va	N	N	N	N	N
cvss4_vuldb_e	P	P	P	P	P
cvss2_vuldb_rl	ND	ND	ND	ND	ND
cvss3_vuldb_rl	X	X	X	X	X
cvss4_vuldb_at	N	N	N	N	N
cvss4_vuldb_ui	N	N	N	N	P
cvss4_vuldb_sc	N	N	N	N	N
cvss4_vuldb_si	N	N	N	N	N
cvss4_vuldb_sa	N	N	N	N	N
cvss2_vuldb_basescore	5.0	5.0	5.0	5.0	5.0
cvss2_vuldb_tempscore	4.3	4.3	4.3	4.3	4.3
cvss3_vuldb_basescore	4.3	4.3	4.3	4.3	4.3
cvss3_vuldb_tempscore	3.9	3.9	3.9	3.9	3.9
cvss3_meta_basescore	4.3	4.3	4.3	4.9	4.9
cvss3_meta_tempscore	3.9	4.1	4.1	4.8	4.8
cvss4_vuldb_bscore	6.9	6.9	6.9	6.9	5.3
cvss4_vuldb_btscore	5.5	5.5	5.5	5.5	2.1
advisory_date	1725573600 (09/06/2024)	1725573600 (09/06/2024)	1725573600 (09/06/2024)	1725573600 (09/06/2024)	1725573600 (09/06/2024)
price_0day	$0-$5k	$0-$5k	$0-$5k	$0-$5k	$0-$5k
cve_nvd_summary		A vulnerability was found in SourceCodester Clinics Patient Management System 2.0. It has been classified as problematic. Affected is an unknown function of the file congratulations.php. The manipulation of the argument goto_page leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.	A vulnerability was found in SourceCodester Clinics Patient Management System 2.0. It has been classified as problematic. Affected is an unknown function of the file congratulations.php. The manipulation of the argument goto_page leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.	A vulnerability was found in SourceCodester Clinics Patient Management System 2.0. It has been classified as problematic. Affected is an unknown function of the file congratulations.php. The manipulation of the argument goto_page leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.	A vulnerability was found in SourceCodester Clinics Patient Management System 2.0. It has been classified as problematic. Affected is an unknown function of the file congratulations.php. The manipulation of the argument goto_page leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
cvss3_cna_av		N	N	N	N
cvss3_cna_ac		L	L	L	L
cvss3_cna_pr		N	N	N	N
cvss3_cna_ui		R	R	R	R
cvss3_cna_s		U	U	U	U
cvss3_cna_c		N	N	N	N
cvss3_cna_i		L	L	L	L
cvss3_cna_a		N	N	N	N
cvss3_cna_basescore		4.3	4.3	4.3	4.3
cvss2_cna_av		N	N	N	N
cvss2_cna_ac		L	L	L	L
cvss2_cna_au		N	N	N	N
cvss2_cna_ci		N	N	N	N
cvss2_cna_ii		P	P	P	P
cvss2_cna_ai		N	N	N	N
cvss2_cna_basescore		5	5	5	5
cve_nvd_summaryes			Se ha encontrado una vulnerabilidad en SourceCodester Clinics Patient Management System 2.0. Se ha clasificado como problemática. Se ve afectada una función desconocida del archivo congratulations.php. La manipulación del argumento goto_page provoca una redirección abierta. Es posible lanzar el ataque de forma remota. El exploit se ha hecho público y puede utilizarse.	Se ha encontrado una vulnerabilidad en SourceCodester Clinics Patient Management System 2.0. Se ha clasificado como problemática. Se ve afectada una función desconocida del archivo congratulations.php. La manipulación del argumento goto_page provoca una redirección abierta. Es posible lanzar el ataque de forma remota. El exploit se ha hecho público y puede utilizarse.	Se ha encontrado una vulnerabilidad en SourceCodester Clinics Patient Management System 2.0. Se ha clasificado como problemática. Se ve afectada una función desconocida del archivo congratulations.php. La manipulación del argumento goto_page provoca una redirección abierta. Es posible lanzar el ataque de forma remota. El exploit se ha hecho público y puede utilizarse.
cvss3_nvd_av				N	N
cvss3_nvd_ac				L	L
cvss3_nvd_pr				N	N
cvss3_nvd_ui				R	R
cvss3_nvd_s				C	C
cvss3_nvd_c				L	L
cvss3_nvd_i				L	L
cvss3_nvd_a				N	N
cvss3_nvd_basescore				6.1	6.1

◂ ପଛକୁ ସମୀକ୍ଷା ଆହୁରି ଦୂରରେ ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!