SQL Injection Vulnerability Discovered in Health Care Hospital Management System
CVE-2024-38347
8.8HIGH
What is CVE-2024-38347?
The Health Care Hospital Management System developed by CodeProjects is susceptible to a SQL injection vulnerability, specifically located within the Room Information module. This vulnerability occurs through the manipulation of the 'id' parameter, allowing attackers to execute arbitrary SQL commands. Exploiting this flaw may lead to unauthorized access to sensitive data or manipulation of the database. It is critical for users of this application to apply necessary security measures and updates to mitigate potential exploitation risks.