SQL Injection Vulnerability in Code-Projects Patient Record Management System
CVE-2024-9034

6.9MEDIUM

Key Information:

Vendor: Code-projects
Status: Patient Record Management System
Vendor: CVE Published:; 20 September 2024

🔔 Create Code-projects Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2024-9034?

A significant security flaw has been identified in the Code-Projects Patient Record Management System version 1.0, predominantly affecting the file login.php. This vulnerability occurs through improper handling of user inputs, specifically the username parameter, which can be exploited to perform SQL injection attacks. Attackers may remotely launch this exploit, leveraging it to access sensitive information within the database. The issue has been publicly disclosed, underscoring the urgent need for users to implement security measures to safeguard their systems against potential intrusions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Patient Record Management System 1.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2024-9034 - Proof of Concept