CVE-2024-8080 Information

Description

A vulnerability classified as critical has been found in SourceCodester Online Health Care System 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument f_name with the input 1%’ or 1=1 ) UNION SELECT 12345database()7891011121314151617181920212223 as part of string leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Reference

https://vuldb.com/?id.275562 https://vuldb.com/?ctiid.275562 https://vuldb.com/?submit.395465 https://github.com/shang159/sqli-vul/blob/main/sql2.md https://www.sourcecodester.com/