SQL Injection Vulnerability Discovered in Health Care Hospital Management System
CVE-2024-37802
8.8HIGH
What is CVE-2024-37802?
A SQL injection vulnerability has been identified in the Patient Info module of CodeProjects Health Care Hospital Management System version 1.0. This vulnerability arises from improper handling of user input through the 'searvalu' parameter, allowing attackers to manipulate SQL queries. Exploiting this weakness can result in unauthorized access to sensitive patient information, potentially leading to data breaches and major security concerns within healthcare environments. Organizations using this system must prioritize assessments and remediation efforts to safeguard against this vulnerability.