Insecure Direct Object References (IDOR) vulnerability in Hospital Management System 1.0 allows attackers to manipulate user parameters for unauthorized access and modifications via crafted POST request to /patient/edit-user.php.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://packetstormsecurity.com/files/177326/Hospital-Management-System-1.0-Insecure-Direct-Object-Reference-Account-Takeover.html | Exploit Third Party Advisory |
| https://packetstormsecurity.com/files/177326/Hospital-Management-System-1.0-Insecure-Direct-Object-Reference-Account-Takeover.html | Exploit Third Party Advisory |
| https://sospiro014.github.io/Hospital-Management-System-1.0-Insecure-Direct-Object-Reference-+-Account-Takeover | Exploit Third Party Advisory |
| https://sospiro014.github.io/Hospital-Management-System-1.0-Insecure-Direct-Object-Reference-+-Account-Takeover | Exploit Third Party Advisory |
Configurations
History
01 Apr 2025, 14:50
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:mayurik:hospital_management_system:1.0:*:*:*:*:*:*:* | |
| First Time |
Mayurik hospital Management System
Mayurik |
|
| References | () https://packetstormsecurity.com/files/177326/Hospital-Management-System-1.0-Insecure-Direct-Object-Reference-Account-Takeover.html - Exploit, Third Party Advisory | |
| References | () https://sospiro014.github.io/Hospital-Management-System-1.0-Insecure-Direct-Object-Reference-+-Account-Takeover - Exploit, Third Party Advisory |
29 Apr 2024, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-29 18:15
Updated : 2025-04-01 14:50
NVD link : CVE-2024-28320
Mitre link : CVE-2024-28320
JSON object : View
Products Affected
mayurik
- hospital_management_system
CWE
No CWE.