SQL Injection Vulnerability in Code-Projects Patient Record Management System
CVE-2024-9034
Key Information:
- Vendor
Code-projects
- Vendor
- CVE Published:
- 20 September 2024
Badges
What is CVE-2024-9034?
A significant security flaw has been identified in the Code-Projects Patient Record Management System version 1.0, predominantly affecting the file login.php. This vulnerability occurs through improper handling of user inputs, specifically the username parameter, which can be exploited to perform SQL injection attacks. Attackers may remotely launch this exploit, leveraging it to access sensitive information within the database. The issue has been publicly disclosed, underscoring the urgent need for users to implement security measures to safeguard their systems against potential intrusions.
Affected Version(s)
Patient Record Management System 1.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.