CVE-2024-10298 MEDIUM

CVE-2024-10298: PHPGurukul Medical Card Generation System Managecard Edit Card Detail Page edit-card-detail.php sql injection

Vendor Phpgurukul

Product Medical Card Generation System

Weakness CWE-89 · SQLi

Published October 23, 2024

Last update October 24, 2024

View on NVD All CVEs

CVSS base score

5.1/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability classified as critical has been found in PHPGurukul Medical Card Generation System 1.0. This affects an unknown part of the file /admin/edit-card-detail.php of the component Managecard Edit Card Detail Page. The manipulation of the argument editid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

October 23, 2024 CVE published

October 24, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-10298 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html