SQL Injection Vulnerability in Patient Management System Could Lead to Remote Exploitation

CVE-2024-7494

Summary

A SQL Injection vulnerability exists in the SourceCodester Clinics Patient Management System version 1.0, specifically in the /new_prescription.php file. This weakness allows an attacker to manipulate the 'patient' argument, possibly leading to unauthorized access to sensitive information contained within the database. The exploit can be executed remotely, heightening the risk of unauthorized data exposure and compromise. Given that the vulnerability has been publicly disclosed, it is essential for users of the affected software to apply relevant security measures promptly.

References