by Kastro
Paper/Archive/CVE-2022-3120

CVE-2022-3120

SourceCodester Clinics Patient Management System — SourceCodester Clinics Patient Management System Login index.php sql injection

EPSS 0.8%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 56.0.560 × 2011.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A vulnerability classified as critical was found in SourceCodester Clinics Patient Management System. Affected by this vulnerability is an unknown functionality of the file index.php of the component Login. The manipulation of the argument user_name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-207847.

Affected

ProductAffectedFixed inSource
Clinics Patient Management Systemn/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulDB (CNA)7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refgithub.com/joinia/webray.com.cn/blob/main/Clinic%27s-Patient-Management-System/cpms.mdrefvuldb.com/?id.207847