SourceCodester Clinic Queuing System LoginRegistration.php authorization

CVE-2024-0264

What is CVE-2024-0264?

The vulnerability in SourceCodester's Clinic Queuing System 1.0 involves an authorization bypass stemming from the manipulation of the formToken argument in the /LoginRegistration.php file. This flaw allows attackers to exploit the system remotely, facilitating unauthorized access to sensitive areas of the application. The potential for remote exploitation raises significant security concerns, especially since the exploit has already been disclosed publicly. Organizations using this version of the Clinic Queuing System should assess their security posture and apply necessary patches or mitigations.

References